[2025-08-25 00:04:03][351272336342704][1 ms][INFO] === Request start === [2025-08-25 00:04:03][351272336342704][2 ms][DEBUG] START check_scloud [2025-08-25 00:04:03][351272336342704][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 00:04:04][351272336342704][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 1942 12465 24586740 143752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 00:04:04][351272336342704][315 ms][DEBUG] targetPkg: running [2025-08-25 00:04:04][351272336342704][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 00:04:04][351272336342704][316 ms][DEBUG] START check_boot_completed [2025-08-25 00:04:04][351272336342704][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 00:04:04][351272336342704][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 00:04:04][351272336342704][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 00:04:04][351272336342704][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 00:04:04][351272336342704][425 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 00:04:04][351272336342704][425 ms][DEBUG] START check_internet [2025-08-25 00:04:04][351272336342704][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 00:04:04][351272336342704][894 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.450/198.450/198.450/0.000 ms\n [2025-08-25 00:04:04][351272336342704][894 ms][DEBUG] check_internet: online [2025-08-25 00:04:04][351272336342704][894 ms][DEBUG] END check_internet in 469 ms [2025-08-25 00:04:04][351272336342704][894 ms][DEBUG] rawBody.length=1148 [2025-08-25 00:04:04][351272336342704][894 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336342704\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4099\"}'\'' -e'"" [2025-08-25 00:04:04][351272336342704][894 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 00:04:04][351272336342704][894 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336342704\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4099\"}'\'' -e'"" [2025-08-25 00:04:08][351272336342704][4830 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67b80009-4a2f-49c3-824e-6e22ae44b15e","id":"QR_67b80009-4a2f-49c3-824e-6e22ae44b15e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 00:04:08][351272336342704][4986 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-25 00:04:08][351272336342704][4986 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-25 00:04:08][351272336342704][4986 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 00:17:03][352927941092833][1 ms][INFO] === Request start === [2025-08-25 00:17:03][352927941092833][1 ms][DEBUG] START check_scloud [2025-08-25 00:17:03][352927941092833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 00:17:03][352927941092833][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 1942 12465 24725208 154748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 00:17:03][352927941092833][307 ms][DEBUG] targetPkg: running [2025-08-25 00:17:03][352927941092833][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 00:17:03][352927941092833][307 ms][DEBUG] START check_boot_completed [2025-08-25 00:17:03][352927941092833][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 00:17:03][352927941092833][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 00:17:03][352927941092833][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 00:17:04][352927941092833][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 00:17:04][352927941092833][386 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 00:17:04][352927941092833][386 ms][DEBUG] rawBody.length=1148 [2025-08-25 00:17:04][352927941092833][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941092833\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6582\"}'\'' -e'"" [2025-08-25 00:17:04][352927941092833][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 00:17:04][352927941092833][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941092833\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6582\"}'\'' -e'"" [2025-08-25 00:17:08][352927941092833][4400 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ee070aa-a47b-4934-9d56-f23bc14735cb","id":"QR_6ee070aa-a47b-4934-9d56-f23bc14735cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 00:17:08][352927941092833][4556 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-25 00:17:08][352927941092833][4556 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-25 00:17:08][352927941092833][4556 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 00:19:02][356467781124939][0 ms][INFO] === Request start === [2025-08-25 00:19:02][356467781124939][1 ms][DEBUG] START check_scloud [2025-08-25 00:19:02][356467781124939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 00:19:03][356467781124939][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 1942 12465 24887304 165768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 00:19:03][356467781124939][271 ms][DEBUG] targetPkg: running [2025-08-25 00:19:03][356467781124939][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-25 00:19:03][356467781124939][271 ms][DEBUG] START check_boot_completed [2025-08-25 00:19:03][356467781124939][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 00:19:03][356467781124939][317 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 00:19:03][356467781124939][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 00:19:03][356467781124939][364 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 00:19:03][356467781124939][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 00:19:03][356467781124939][364 ms][DEBUG] rawBody.length=1148 [2025-08-25 00:19:03][356467781124939][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356467781124939\",\"model\":\"SM-X616B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1636\"}'\'' -e'"" [2025-08-25 00:19:03][356467781124939][364 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 00:19:03][356467781124939][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356467781124939\",\"model\":\"SM-X616B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1636\"}'\'' -e'"" [2025-08-25 00:19:07][356467781124939][4535 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b5797975-796f-4251-9088-fea1f178a3ee","id":"QR_b5797975-796f-4251-9088-fea1f178a3ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 00:19:07][356467781124939][4691 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-08-25 00:19:07][356467781124939][4691 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-25 00:19:07][356467781124939][4691 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 00:24:05][355096880813018][1 ms][INFO] === Request start === [2025-08-25 00:24:05][355096880813018][1 ms][DEBUG] START check_scloud [2025-08-25 00:24:05][355096880813018][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 00:24:05][355096880813018][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 1942 12465 24999148 178292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 00:24:05][355096880813018][299 ms][DEBUG] targetPkg: running [2025-08-25 00:24:05][355096880813018][300 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 00:24:05][355096880813018][300 ms][DEBUG] START check_boot_completed [2025-08-25 00:24:05][355096880813018][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 00:24:05][355096880813018][345 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 00:24:05][355096880813018][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 00:24:05][355096880813018][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 00:24:05][355096880813018][408 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 00:24:05][355096880813018][408 ms][DEBUG] START check_internet [2025-08-25 00:24:05][355096880813018][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 00:24:05][355096880813018][876 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.162/202.162/202.162/0.000 ms\n [2025-08-25 00:24:05][355096880813018][876 ms][DEBUG] check_internet: online [2025-08-25 00:24:05][355096880813018][876 ms][DEBUG] END check_internet in 469 ms [2025-08-25 00:24:05][355096880813018][876 ms][DEBUG] rawBody.length=1149 [2025-08-25 00:24:05][355096880813018][877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355096880813018\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1708\"}'\'' -e'"" [2025-08-25 00:24:05][355096880813018][877 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 00:24:05][355096880813018][877 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355096880813018\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1708\"}'\'' -e'"" [2025-08-25 00:24:10][355096880813018][5063 ms][DEBUG] proc_open done in 4186 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 00:24:10][355096880813018][5063 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 00:24:10][355096880813018][5063 ms][WARN] Detected error: Process with pid 1942 either refused to load frida-agent, or terminated during injection [2025-08-25 00:24:10][355096880813018][5063 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 00:24:10][355096880813018][5203 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 00:24:10][355096880813018][5203 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 00:24:10][355096880813018][5204 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 00:24:10][355096880813018][5328 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 00:24:10][355096880813018][5328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 00:24:10][355096880813018][5516 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 00:24:12][355096880813018][7531 ms][DEBUG] START check_boot_completed [2025-08-25 00:24:12][355096880813018][7531 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 00:24:12][355096880813018][7578 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 00:24:12][355096880813018][7578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 00:24:12][355096880813018][7625 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 00:24:12][355096880813018][7625 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 00:24:15][355096880813018][10639 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 00:24:15][355096880813018][10639 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355096880813018\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1708\"}'\'' -e'"" [2025-08-25 00:24:20][355096880813018][15841 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_083b1546-9275-43ff-a0ad-93396b4c7a04","id":"QR_083b1546-9275-43ff-a0ad-93396b4c7a04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 00:24:21][355096880813018][15998 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-08-25 00:24:21][355096880813018][15998 ms][DEBUG] END runCmdUntilRes#2 in 5358 ms [2025-08-25 00:24:21][355096880813018][15998 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 00:33:04][356263631697152][1 ms][INFO] === Request start === [2025-08-25 00:33:04][356263631697152][1 ms][DEBUG] START check_scloud [2025-08-25 00:33:04][356263631697152][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 00:33:04][356263631697152][292 ms][DEBUG] SU: done in 290 ms; outu0_a118 7032 12465 23644076 127164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 00:33:04][356263631697152][292 ms][DEBUG] targetPkg: running [2025-08-25 00:33:04][356263631697152][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-25 00:33:04][356263631697152][292 ms][DEBUG] START check_boot_completed [2025-08-25 00:33:04][356263631697152][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 00:33:05][356263631697152][323 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 00:33:05][356263631697152][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 00:33:05][356263631697152][370 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 00:33:05][356263631697152][370 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 00:33:05][356263631697152][370 ms][DEBUG] rawBody.length=1149 [2025-08-25 00:33:05][356263631697152][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356263631697152\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5368\"}'\'' -e'"" [2025-08-25 00:33:05][356263631697152][371 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 00:33:05][356263631697152][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356263631697152\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5368\"}'\'' -e'"" [2025-08-25 00:33:09][356263631697152][5275 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e97a971-e758-48ec-ac46-cbaf0a7b432b","id":"QR_8e97a971-e758-48ec-ac46-cbaf0a7b432b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 00:33:10][356263631697152][5431 ms][DEBUG] proc_open done in 5060 ms; code=255; res.len=3343 [2025-08-25 00:33:10][356263631697152][5431 ms][DEBUG] END runCmdUntilRes#1 in 5060 ms [2025-08-25 00:33:10][356263631697152][5431 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 00:44:02][352978605076950][1 ms][INFO] === Request start === [2025-08-25 00:44:02][352978605076950][1 ms][DEBUG] START check_scloud [2025-08-25 00:44:02][352978605076950][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 00:44:03][352978605076950][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 7032 12465 23778064 138260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 00:44:03][352978605076950][304 ms][DEBUG] targetPkg: running [2025-08-25 00:44:03][352978605076950][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 00:44:03][352978605076950][304 ms][DEBUG] START check_boot_completed [2025-08-25 00:44:03][352978605076950][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 00:44:03][352978605076950][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 00:44:03][352978605076950][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 00:44:03][352978605076950][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 00:44:03][352978605076950][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 00:44:03][352978605076950][398 ms][DEBUG] START check_internet [2025-08-25 00:44:03][352978605076950][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 00:44:03][352978605076950][898 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.608/202.608/202.608/0.000 ms\n [2025-08-25 00:44:03][352978605076950][898 ms][DEBUG] check_internet: online [2025-08-25 00:44:03][352978605076950][898 ms][DEBUG] END check_internet in 500 ms [2025-08-25 00:44:03][352978605076950][898 ms][DEBUG] rawBody.length=1148 [2025-08-25 00:44:03][352978605076950][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978605076950\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1655\"}'\'' -e'"" [2025-08-25 00:44:03][352978605076950][898 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 00:44:03][352978605076950][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978605076950\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1655\"}'\'' -e'"" [2025-08-25 00:44:08][352978605076950][5022 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be43dffd-2a6d-49bc-bcb1-70342c827d29","id":"QR_be43dffd-2a6d-49bc-bcb1-70342c827d29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 00:44:08][352978605076950][5178 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-25 00:44:08][352978605076950][5178 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-25 00:44:08][352978605076950][5178 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 00:51:04][354793243587534][1 ms][INFO] === Request start === [2025-08-25 00:51:04][354793243587534][1 ms][DEBUG] START check_scloud [2025-08-25 00:51:04][354793243587534][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 00:51:05][354793243587534][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 7032 12465 23885812 149604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 00:51:05][354793243587534][294 ms][DEBUG] targetPkg: running [2025-08-25 00:51:05][354793243587534][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-25 00:51:05][354793243587534][294 ms][DEBUG] START check_boot_completed [2025-08-25 00:51:05][354793243587534][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 00:51:05][354793243587534][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 00:51:05][354793243587534][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 00:51:05][354793243587534][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 00:51:05][354793243587534][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 00:51:05][354793243587534][372 ms][DEBUG] rawBody.length=1149 [2025-08-25 00:51:05][354793243587534][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354793243587534\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9051\"}'\'' -e'"" [2025-08-25 00:51:05][354793243587534][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 00:51:05][354793243587534][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354793243587534\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9051\"}'\'' -e'"" [2025-08-25 00:51:09][354793243587534][4746 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 00:51:09][354793243587534][4902 ms][DEBUG] proc_open done in 4529 ms; code=255; res.len=115 [2025-08-25 00:51:09][354793243587534][4902 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-25 00:51:09][354793243587534][4902 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 00:51:09][][0 ms][INFO] === Request start === [2025-08-25 00:51:09][][1 ms][DEBUG] START check_scloud [2025-08-25 00:51:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 00:51:10][][259 ms][DEBUG] SU: done in 259 ms; outu0_a118 7032 12465 24037768 160608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 00:51:10][][259 ms][DEBUG] targetPkg: running [2025-08-25 00:51:10][][259 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 00:51:10][][259 ms][DEBUG] START check_boot_completed [2025-08-25 00:51:10][][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 00:51:10][][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 00:51:10][][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 00:51:10][][368 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 00:51:10][][369 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 00:51:10][][369 ms][DEBUG] rawBody.length=1130 [2025-08-25 00:51:10][][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58W50YBE7B\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1065\"}'\'' -e'"" [2025-08-25 00:51:10][][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 00:51:10][][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58W50YBE7B\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1065\"}'\'' -e'"" [2025-08-25 00:51:14][][4149 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 00:51:14][][4305 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=115 [2025-08-25 00:51:14][][4305 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-25 00:51:14][][4305 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 00:51:14][354793243587534][0 ms][INFO] === Request start === [2025-08-25 00:51:14][354793243587534][1 ms][DEBUG] START check_scloud [2025-08-25 00:51:14][354793243587534][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 00:51:15][354793243587534][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 7032 12465 24170128 172716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 00:51:15][354793243587534][307 ms][DEBUG] targetPkg: running [2025-08-25 00:51:15][354793243587534][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 00:51:15][354793243587534][307 ms][DEBUG] START check_boot_completed [2025-08-25 00:51:15][354793243587534][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 00:51:15][354793243587534][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 00:51:15][354793243587534][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 00:51:15][354793243587534][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 00:51:15][354793243587534][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 00:51:15][354793243587534][400 ms][DEBUG] rawBody.length=1148 [2025-08-25 00:51:15][354793243587534][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354793243587534\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9095\"}'\'' -e'"" [2025-08-25 00:51:15][354793243587534][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 00:51:15][354793243587534][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354793243587534\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9095\"}'\'' -e'"" [2025-08-25 00:51:19][354793243587534][4587 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d304c32-1c7c-43af-ae61-0d2fc6e7d34f","id":"QR_3d304c32-1c7c-43af-ae61-0d2fc6e7d34f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 00:51:19][354793243587534][4743 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3343 [2025-08-25 00:51:19][354793243587534][4743 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-25 00:51:19][354793243587534][4743 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 01:05:03][352047914492298][1 ms][INFO] === Request start === [2025-08-25 01:05:03][352047914492298][1 ms][DEBUG] START check_scloud [2025-08-25 01:05:03][352047914492298][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 01:05:03][352047914492298][337 ms][DEBUG] SU: done in 336 ms; outu0_a118 7032 12465 24296672 120900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 01:05:03][352047914492298][337 ms][DEBUG] targetPkg: running [2025-08-25 01:05:03][352047914492298][337 ms][DEBUG] END check_scloud in 336 ms [2025-08-25 01:05:03][352047914492298][337 ms][DEBUG] START check_boot_completed [2025-08-25 01:05:03][352047914492298][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 01:05:03][352047914492298][384 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 01:05:03][352047914492298][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 01:05:03][352047914492298][430 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 01:05:03][352047914492298][430 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 01:05:03][352047914492298][430 ms][DEBUG] rawBody.length=1148 [2025-08-25 01:05:03][352047914492298][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352047914492298\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3856\"}'\'' -e'"" [2025-08-25 01:05:03][352047914492298][430 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 01:05:03][352047914492298][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352047914492298\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3856\"}'\'' -e'"" [2025-08-25 01:05:08][352047914492298][4820 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8118c183-6bf2-4142-8a3a-941b45e91375","id":"QR_8118c183-6bf2-4142-8a3a-941b45e91375","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 01:05:08][352047914492298][4976 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3343 [2025-08-25 01:05:08][352047914492298][4976 ms][DEBUG] END runCmdUntilRes#1 in 4546 ms [2025-08-25 01:05:08][352047914492298][4976 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 01:08:04][352967354216115][1 ms][INFO] === Request start === [2025-08-25 01:08:04][352967354216115][1 ms][DEBUG] START check_scloud [2025-08-25 01:08:04][352967354216115][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 01:08:05][352967354216115][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 7032 12465 24434128 131584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 01:08:05][352967354216115][303 ms][DEBUG] targetPkg: running [2025-08-25 01:08:05][352967354216115][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 01:08:05][352967354216115][303 ms][DEBUG] START check_boot_completed [2025-08-25 01:08:05][352967354216115][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 01:08:05][352967354216115][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 01:08:05][352967354216115][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 01:08:05][352967354216115][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 01:08:05][352967354216115][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 01:08:05][352967354216115][397 ms][DEBUG] START check_internet [2025-08-25 01:08:05][352967354216115][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 01:08:05][352967354216115][912 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.080/202.080/202.080/0.000 ms\n [2025-08-25 01:08:05][352967354216115][912 ms][DEBUG] check_internet: online [2025-08-25 01:08:05][352967354216115][912 ms][DEBUG] END check_internet in 515 ms [2025-08-25 01:08:05][352967354216115][912 ms][DEBUG] rawBody.length=1149 [2025-08-25 01:08:05][352967354216115][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354216115\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6475\"}'\'' -e'"" [2025-08-25 01:08:05][352967354216115][913 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 01:08:05][352967354216115][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354216115\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6475\"}'\'' -e'"" [2025-08-25 01:08:11][352967354216115][6989 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1df3308f-90e4-4b0a-bafb-b8ec445af09b","id":"QR_1df3308f-90e4-4b0a-bafb-b8ec445af09b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 01:08:11][352967354216115][7145 ms][DEBUG] proc_open done in 6232 ms; code=255; res.len=3343 [2025-08-25 01:08:11][352967354216115][7145 ms][DEBUG] END runCmdUntilRes#1 in 6232 ms [2025-08-25 01:08:11][352967354216115][7145 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 01:11:04][358754170229843][1 ms][INFO] === Request start === [2025-08-25 01:11:04][358754170229843][1 ms][DEBUG] START check_scloud [2025-08-25 01:11:04][358754170229843][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 01:11:04][358754170229843][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 7032 12465 24578740 135984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 01:11:04][358754170229843][264 ms][DEBUG] targetPkg: running [2025-08-25 01:11:04][358754170229843][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-25 01:11:04][358754170229843][264 ms][DEBUG] START check_boot_completed [2025-08-25 01:11:04][358754170229843][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 01:11:04][358754170229843][311 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 01:11:04][358754170229843][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 01:11:04][358754170229843][359 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 01:11:04][358754170229843][359 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 01:11:04][358754170229843][359 ms][DEBUG] rawBody.length=1149 [2025-08-25 01:11:04][358754170229843][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358754170229843\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1590\"}'\'' -e'"" [2025-08-25 01:11:04][358754170229843][359 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 01:11:04][358754170229843][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358754170229843\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1590\"}'\'' -e'"" [2025-08-25 01:11:12][358754170229843][8387 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_963b4824-b320-4afb-931e-d2078b7f631e","id":"QR_963b4824-b320-4afb-931e-d2078b7f631e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 01:11:12][358754170229843][8543 ms][DEBUG] proc_open done in 8184 ms; code=255; res.len=3343 [2025-08-25 01:11:12][358754170229843][8543 ms][DEBUG] END runCmdUntilRes#1 in 8184 ms [2025-08-25 01:11:12][358754170229843][8543 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 01:26:03][357967971589576][1 ms][INFO] === Request start === [2025-08-25 01:26:03][357967971589576][1 ms][DEBUG] START check_scloud [2025-08-25 01:26:03][357967971589576][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 01:26:03][357967971589576][261 ms][DEBUG] SU: done in 259 ms; outu0_a118 7032 12465 24680140 141604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 01:26:03][357967971589576][261 ms][DEBUG] targetPkg: running [2025-08-25 01:26:03][357967971589576][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-25 01:26:03][357967971589576][261 ms][DEBUG] START check_boot_completed [2025-08-25 01:26:03][357967971589576][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 01:26:03][357967971589576][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 01:26:03][357967971589576][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 01:26:03][357967971589576][354 ms][DEBUG] SU: done in 46 ms; out [2025-08-25 01:26:03][357967971589576][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 01:26:03][357967971589576][354 ms][DEBUG] START check_internet [2025-08-25 01:26:03][357967971589576][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 01:26:04][357967971589576][855 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.742/202.742/202.742/0.000 ms\n [2025-08-25 01:26:04][357967971589576][855 ms][DEBUG] check_internet: online [2025-08-25 01:26:04][357967971589576][855 ms][DEBUG] END check_internet in 501 ms [2025-08-25 01:26:04][357967971589576][855 ms][DEBUG] rawBody.length=1148 [2025-08-25 01:26:04][357967971589576][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967971589576\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3303\"}'\'' -e'"" [2025-08-25 01:26:04][357967971589576][855 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 01:26:04][357967971589576][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967971589576\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3303\"}'\'' -e'"" [2025-08-25 01:26:08][357967971589576][4931 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93649628-db26-45a4-8e6f-444b4105722e","id":"QR_93649628-db26-45a4-8e6f-444b4105722e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 01:26:08][357967971589576][5087 ms][DEBUG] proc_open done in 4232 ms; code=255; res.len=3343 [2025-08-25 01:26:08][357967971589576][5087 ms][DEBUG] END runCmdUntilRes#1 in 4232 ms [2025-08-25 01:26:08][357967971589576][5088 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 01:27:03][353497471874967][0 ms][INFO] === Request start === [2025-08-25 01:27:03][353497471874967][1 ms][DEBUG] START check_scloud [2025-08-25 01:27:03][353497471874967][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 01:27:03][353497471874967][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 7032 12465 24834048 152424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 01:27:03][353497471874967][297 ms][DEBUG] targetPkg: running [2025-08-25 01:27:03][353497471874967][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 01:27:03][353497471874967][297 ms][DEBUG] START check_boot_completed [2025-08-25 01:27:03][353497471874967][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 01:27:03][353497471874967][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 01:27:03][353497471874967][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 01:27:03][353497471874967][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 01:27:03][353497471874967][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 01:27:03][353497471874967][406 ms][DEBUG] rawBody.length=1148 [2025-08-25 01:27:03][353497471874967][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497471874967\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9635\"}'\'' -e'"" [2025-08-25 01:27:03][353497471874967][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 01:27:03][353497471874967][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497471874967\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9635\"}'\'' -e'"" [2025-08-25 01:27:07][353497471874967][4123 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 01:27:07][353497471874967][4280 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=115 [2025-08-25 01:27:07][353497471874967][4280 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-25 01:27:07][353497471874967][4280 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 01:27:07][][0 ms][INFO] === Request start === [2025-08-25 01:27:07][][1 ms][DEBUG] START check_scloud [2025-08-25 01:27:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 01:27:07][][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 7032 12465 24986760 164192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 01:27:07][][306 ms][DEBUG] targetPkg: running [2025-08-25 01:27:07][][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 01:27:07][][306 ms][DEBUG] START check_boot_completed [2025-08-25 01:27:07][][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 01:27:08][][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 01:27:08][][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 01:27:08][][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 01:27:08][][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 01:27:08][][400 ms][DEBUG] rawBody.length=1129 [2025-08-25 01:27:08][][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX214ZMLV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3155\"}'\'' -e'"" [2025-08-25 01:27:08][][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 01:27:08][][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX214ZMLV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3155\"}'\'' -e'"" [2025-08-25 01:27:16][][8929 ms][DEBUG] proc_open done in 8529 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 01:27:16][][8929 ms][DEBUG] END runCmdUntilRes#1 in 8529 ms [2025-08-25 01:27:16][][8929 ms][WARN] Detected error: Process with pid 7032 either refused to load frida-agent, or terminated during injection [2025-08-25 01:27:16][][8929 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 01:27:16][][9085 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 01:27:16][][9085 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 01:27:16][][9085 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 01:27:17][][9335 ms][DEBUG] SU: done in 250 ms; out [2025-08-25 01:27:17][][9335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 01:27:17][][9553 ms][DEBUG] SU: done in 219 ms; out [2025-08-25 01:27:19][][11568 ms][DEBUG] START check_boot_completed [2025-08-25 01:27:19][][11568 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 01:27:19][][11615 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 01:27:19][][11616 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 01:27:19][][11709 ms][DEBUG] SU: done in 93 ms; out [2025-08-25 01:27:19][][11709 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 01:27:22][][14724 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 01:27:22][][14724 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX214ZMLV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3155\"}'\'' -e'"" [2025-08-25 01:27:23][][16271 ms][DEBUG] proc_open done in 1547 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-25 01:27:23][][16271 ms][DEBUG] END runCmdUntilRes#2 in 1547 ms [2025-08-25 01:27:23][][16271 ms][WARN] Detected error 2; Reboot the device [2025-08-25 01:27:23][][16271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 01:27:24][][16926 ms][DEBUG] SU: done in 656 ms; out [2025-08-25 01:28:03][353497471874967][0 ms][INFO] === Request start === [2025-08-25 01:28:03][353497471874967][1 ms][DEBUG] START check_scloud [2025-08-25 01:28:03][353497471874967][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 01:28:03][353497471874967][35 ms][DEBUG] SU: done in 35 ms; out [2025-08-25 01:28:03][353497471874967][35 ms][WARN] targetPkg: not running, restarting [2025-08-25 01:28:03][353497471874967][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 01:28:03][353497471874967][66 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 01:28:03][353497471874967][66 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 01:28:03][353497471874967][98 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 01:28:05][353497471874967][2113 ms][DEBUG] END check_scloud in 2112 ms [2025-08-25 01:28:05][353497471874967][2113 ms][DEBUG] START check_boot_completed [2025-08-25 01:28:05][353497471874967][2113 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 01:28:25][353497471874967][21450 ms][DEBUG] ADB: done in 19337 ms; out [2025-08-25 01:28:25][353497471874967][21450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 01:28:25][353497471874967][21513 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 01:28:25][353497471874967][21513 ms][DEBUG] END check_boot_completed in 19400 ms [2025-08-25 01:28:25][353497471874967][21513 ms][DEBUG] START check_internet [2025-08-25 01:28:25][353497471874967][21513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 01:28:25][353497471874967][21685 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 01:28:25][353497471874967][21685 ms][WARN] check_internet: offline [2025-08-25 01:28:25][353497471874967][21685 ms][DEBUG] END check_internet in 172 ms [2025-08-25 01:29:03][353497471874967][1 ms][INFO] === Request start === [2025-08-25 01:29:03][353497471874967][1 ms][DEBUG] START check_scloud [2025-08-25 01:29:03][353497471874967][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 01:29:03][353497471874967][435 ms][DEBUG] SU: done in 434 ms; out [2025-08-25 01:29:03][353497471874967][435 ms][WARN] targetPkg: not running, restarting [2025-08-25 01:29:03][353497471874967][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 01:29:04][353497471874967][576 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 01:29:04][353497471874967][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 01:29:04][353497471874967][857 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 01:29:06][353497471874967][2872 ms][DEBUG] END check_scloud in 2871 ms [2025-08-25 01:29:06][353497471874967][2872 ms][DEBUG] START check_boot_completed [2025-08-25 01:29:06][353497471874967][2872 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 01:29:06][353497471874967][2919 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 01:29:06][353497471874967][2919 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 01:29:06][353497471874967][2997 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 01:29:06][353497471874967][2997 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 01:29:06][353497471874967][2997 ms][DEBUG] rawBody.length=1148 [2025-08-25 01:29:06][353497471874967][2997 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497471874967\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3267\"}'\'' -e'"" [2025-08-25 01:29:06][353497471874967][2997 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 01:29:06][353497471874967][2997 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497471874967\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3267\"}'\'' -e'"" [2025-08-25 01:29:12][353497471874967][8730 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 01:29:12][353497471874967][8886 ms][DEBUG] proc_open done in 5889 ms; code=255; res.len=115 [2025-08-25 01:29:12][353497471874967][8886 ms][DEBUG] END runCmdUntilRes#1 in 5889 ms [2025-08-25 01:29:12][353497471874967][8886 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 01:29:12][][0 ms][INFO] === Request start === [2025-08-25 01:29:12][][1 ms][DEBUG] START check_scloud [2025-08-25 01:29:12][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 01:29:13][][349 ms][DEBUG] SU: done in 349 ms; outu0_a118 11332 4882 23703448 118496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 01:29:13][][349 ms][DEBUG] targetPkg: running [2025-08-25 01:29:13][][349 ms][DEBUG] END check_scloud in 349 ms [2025-08-25 01:29:13][][349 ms][DEBUG] START check_boot_completed [2025-08-25 01:29:13][][350 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 01:29:13][][396 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 01:29:13][][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 01:29:13][][458 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 01:29:13][][458 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 01:29:13][][458 ms][DEBUG] rawBody.length=1129 [2025-08-25 01:29:13][][458 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX214ZMLV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6298\"}'\'' -e'"" [2025-08-25 01:29:13][][458 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 01:29:13][][458 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX214ZMLV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6298\"}'\'' -e'"" [2025-08-25 01:29:17][][5160 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 01:29:18][][5317 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=115 [2025-08-25 01:29:18][][5317 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-08-25 01:29:18][][5317 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 01:29:20][353497471874967][0 ms][INFO] === Request start === [2025-08-25 01:29:20][353497471874967][1 ms][DEBUG] START check_scloud [2025-08-25 01:29:20][353497471874967][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 01:29:20][353497471874967][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 11332 4882 23829344 117928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 01:29:20][353497471874967][288 ms][DEBUG] targetPkg: running [2025-08-25 01:29:20][353497471874967][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-25 01:29:20][353497471874967][288 ms][DEBUG] START check_boot_completed [2025-08-25 01:29:20][353497471874967][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 01:29:20][353497471874967][334 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 01:29:20][353497471874967][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 01:29:20][353497471874967][412 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 01:29:20][353497471874967][412 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-25 01:29:20][353497471874967][412 ms][DEBUG] rawBody.length=1149 [2025-08-25 01:29:20][353497471874967][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497471874967\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6417\"}'\'' -e'"" [2025-08-25 01:29:20][353497471874967][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 01:29:20][353497471874967][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497471874967\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6417\"}'\'' -e'"" [2025-08-25 01:29:26][353497471874967][5958 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08155ef6-e2bd-4e26-ba92-ee0cf1e6b797","id":"QR_08155ef6-e2bd-4e26-ba92-ee0cf1e6b797","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 01:29:26][353497471874967][6114 ms][DEBUG] proc_open done in 5702 ms; code=255; res.len=3343 [2025-08-25 01:29:26][353497471874967][6114 ms][DEBUG] END runCmdUntilRes#1 in 5702 ms [2025-08-25 01:29:26][353497471874967][6114 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 01:58:04][355298661107061][1 ms][INFO] === Request start === [2025-08-25 01:58:04][355298661107061][1 ms][DEBUG] START check_scloud [2025-08-25 01:58:04][355298661107061][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 01:58:05][355298661107061][347 ms][DEBUG] SU: done in 345 ms; out [2025-08-25 01:58:05][355298661107061][347 ms][WARN] targetPkg: not running, restarting [2025-08-25 01:58:05][355298661107061][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 01:58:05][355298661107061][472 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 01:58:05][355298661107061][472 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 01:58:05][355298661107061][661 ms][DEBUG] SU: done in 189 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 01:58:07][355298661107061][2674 ms][DEBUG] END check_scloud in 2673 ms [2025-08-25 01:58:07][355298661107061][2674 ms][DEBUG] START check_boot_completed [2025-08-25 01:58:07][355298661107061][2674 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 01:58:07][355298661107061][2721 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 01:58:07][355298661107061][2721 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 01:58:07][355298661107061][2769 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 01:58:07][355298661107061][2769 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 01:58:07][355298661107061][2769 ms][DEBUG] START check_internet [2025-08-25 01:58:07][355298661107061][2769 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 01:58:08][355298661107061][3487 ms][DEBUG] SU: done in 718 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.401/202.401/202.401/0.000 ms\n [2025-08-25 01:58:08][355298661107061][3487 ms][DEBUG] check_internet: online [2025-08-25 01:58:08][355298661107061][3487 ms][DEBUG] END check_internet in 718 ms [2025-08-25 01:58:08][355298661107061][3487 ms][DEBUG] rawBody.length=1149 [2025-08-25 01:58:08][355298661107061][3487 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355298661107061\",\"model\":\"SM-N981U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4979\"}'\'' -e'"" [2025-08-25 01:58:08][355298661107061][3487 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 01:58:08][355298661107061][3487 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355298661107061\",\"model\":\"SM-N981U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4979\"}'\'' -e'"" [2025-08-25 01:58:15][355298661107061][10782 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_826ad848-5508-4c57-8af9-4a3dd741c468","id":"QR_826ad848-5508-4c57-8af9-4a3dd741c468","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 01:58:15][355298661107061][10938 ms][DEBUG] proc_open done in 7451 ms; code=255; res.len=3343 [2025-08-25 01:58:15][355298661107061][10938 ms][DEBUG] END runCmdUntilRes#1 in 7451 ms [2025-08-25 01:58:15][355298661107061][10938 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 02:16:04][350496870363146][1 ms][INFO] === Request start === [2025-08-25 02:16:04][350496870363146][1 ms][DEBUG] START check_scloud [2025-08-25 02:16:04][350496870363146][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 02:16:04][350496870363146][282 ms][DEBUG] SU: done in 280 ms; outu0_a118 25586 14427 23506548 99500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 02:16:04][350496870363146][282 ms][DEBUG] targetPkg: running [2025-08-25 02:16:04][350496870363146][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-25 02:16:04][350496870363146][282 ms][DEBUG] START check_boot_completed [2025-08-25 02:16:04][350496870363146][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 02:16:04][350496870363146][312 ms][DEBUG] ADB: done in 30 ms; out [2025-08-25 02:16:04][350496870363146][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 02:16:05][350496870363146][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 02:16:05][350496870363146][359 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-25 02:16:05][350496870363146][359 ms][DEBUG] START check_internet [2025-08-25 02:16:05][350496870363146][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 02:16:05][350496870363146][874 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.077/202.077/202.077/0.000 ms\n [2025-08-25 02:16:05][350496870363146][875 ms][DEBUG] check_internet: online [2025-08-25 02:16:05][350496870363146][875 ms][DEBUG] END check_internet in 516 ms [2025-08-25 02:16:05][350496870363146][875 ms][DEBUG] rawBody.length=1149 [2025-08-25 02:16:05][350496870363146][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350496870363146\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1600\"}'\'' -e'"" [2025-08-25 02:16:05][350496870363146][875 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 02:16:05][350496870363146][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350496870363146\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1600\"}'\'' -e'"" [2025-08-25 02:16:11][350496870363146][6638 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d296362-8d1c-4237-bd0b-c17049f7ce4c","id":"QR_7d296362-8d1c-4237-bd0b-c17049f7ce4c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 02:16:11][350496870363146][6795 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-08-25 02:16:11][350496870363146][6795 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-08-25 02:16:11][350496870363146][6795 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 02:51:04][350599271188853][1 ms][INFO] === Request start === [2025-08-25 02:51:04][350599271188853][1 ms][DEBUG] START check_scloud [2025-08-25 02:51:04][350599271188853][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 02:51:04][350599271188853][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 25586 14427 23619352 110200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 02:51:04][350599271188853][327 ms][DEBUG] targetPkg: running [2025-08-25 02:51:04][350599271188853][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-25 02:51:04][350599271188853][327 ms][DEBUG] START check_boot_completed [2025-08-25 02:51:04][350599271188853][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 02:51:04][350599271188853][358 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 02:51:04][350599271188853][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 02:51:04][350599271188853][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 02:51:04][350599271188853][405 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 02:51:04][350599271188853][405 ms][DEBUG] rawBody.length=1149 [2025-08-25 02:51:04][350599271188853][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350599271188853\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5007\"}'\'' -e'"" [2025-08-25 02:51:04][350599271188853][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 02:51:04][350599271188853][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350599271188853\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5007\"}'\'' -e'"" [2025-08-25 02:51:10][350599271188853][5826 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6558fb0c-55bd-476c-bd1e-eb6d208f0141","id":"QR_6558fb0c-55bd-476c-bd1e-eb6d208f0141","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 02:51:10][350599271188853][5982 ms][DEBUG] proc_open done in 5577 ms; code=255; res.len=3343 [2025-08-25 02:51:10][350599271188853][5982 ms][DEBUG] END runCmdUntilRes#1 in 5577 ms [2025-08-25 02:51:10][350599271188853][5982 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 02:51:17][358385390299512][0 ms][INFO] === Request start === [2025-08-25 02:51:17][358385390299512][1 ms][DEBUG] START check_scloud [2025-08-25 02:51:17][358385390299512][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 02:51:18][358385390299512][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 25586 14427 23804908 102832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 02:51:18][358385390299512][324 ms][DEBUG] targetPkg: running [2025-08-25 02:51:18][358385390299512][324 ms][DEBUG] END check_scloud in 324 ms [2025-08-25 02:51:18][358385390299512][324 ms][DEBUG] START check_boot_completed [2025-08-25 02:51:18][358385390299512][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 02:51:18][358385390299512][371 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 02:51:18][358385390299512][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 02:51:18][358385390299512][418 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 02:51:18][358385390299512][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 02:51:18][358385390299512][418 ms][DEBUG] rawBody.length=1148 [2025-08-25 02:51:18][358385390299512][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390299512\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9669\"}'\'' -e'"" [2025-08-25 02:51:18][358385390299512][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 02:51:18][358385390299512][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390299512\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9669\"}'\'' -e'"" [2025-08-25 02:51:26][358385390299512][9197 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 02:51:27][358385390299512][9353 ms][DEBUG] proc_open done in 8935 ms; code=255; res.len=115 [2025-08-25 02:51:27][358385390299512][9353 ms][DEBUG] END runCmdUntilRes#1 in 8935 ms [2025-08-25 02:51:27][358385390299512][9353 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 02:51:27][][0 ms][INFO] === Request start === [2025-08-25 02:51:27][][1 ms][DEBUG] START check_scloud [2025-08-25 02:51:27][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 02:51:27][][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 25586 14427 23932688 109792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 02:51:27][][310 ms][DEBUG] targetPkg: running [2025-08-25 02:51:27][][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 02:51:27][][310 ms][DEBUG] START check_boot_completed [2025-08-25 02:51:27][][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 02:51:27][][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 02:51:27][][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 02:51:27][][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 02:51:27][][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 02:51:27][][404 ms][DEBUG] rawBody.length=1129 [2025-08-25 02:51:27][][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5183\"}'\'' -e'"" [2025-08-25 02:51:27][][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 02:51:27][][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5183\"}'\'' -e'"" [2025-08-25 02:51:31][][3918 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 02:51:31][][4075 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=115 [2025-08-25 02:51:31][][4075 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-25 02:51:31][][4075 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 02:51:33][358385390299512][1 ms][INFO] === Request start === [2025-08-25 02:51:33][358385390299512][1 ms][DEBUG] START check_scloud [2025-08-25 02:51:33][358385390299512][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 02:51:33][358385390299512][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 25586 14427 24105944 114460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 02:51:33][358385390299512][267 ms][DEBUG] targetPkg: running [2025-08-25 02:51:33][358385390299512][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-25 02:51:33][358385390299512][267 ms][DEBUG] START check_boot_completed [2025-08-25 02:51:33][358385390299512][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 02:51:34][358385390299512][313 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 02:51:34][358385390299512][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 02:51:34][358385390299512][360 ms][DEBUG] SU: done in 46 ms; out [2025-08-25 02:51:34][358385390299512][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 02:51:34][358385390299512][360 ms][DEBUG] rawBody.length=1149 [2025-08-25 02:51:34][358385390299512][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390299512\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1658\"}'\'' -e'"" [2025-08-25 02:51:34][358385390299512][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 02:51:34][358385390299512][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390299512\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1658\"}'\'' -e'"" [2025-08-25 02:51:37][358385390299512][4203 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 02:51:38][358385390299512][4359 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=107 [2025-08-25 02:51:38][358385390299512][4359 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-25 02:51:38][358385390299512][4359 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 02:51:38][][0 ms][INFO] === Request start === [2025-08-25 02:51:38][][1 ms][DEBUG] START check_scloud [2025-08-25 02:51:38][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 02:51:38][][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 25586 14427 24285408 120736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 02:51:38][][289 ms][DEBUG] targetPkg: running [2025-08-25 02:51:38][][289 ms][DEBUG] END check_scloud in 289 ms [2025-08-25 02:51:38][][289 ms][DEBUG] START check_boot_completed [2025-08-25 02:51:38][][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 02:51:38][][321 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 02:51:38][][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 02:51:38][][368 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 02:51:38][][368 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 02:51:38][][368 ms][DEBUG] rawBody.length=1130 [2025-08-25 02:51:38][][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7295\"}'\'' -e'"" [2025-08-25 02:51:38][][368 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 02:51:38][][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7295\"}'\'' -e'"" [2025-08-25 02:51:42][][4367 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 02:51:42][][4523 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=107 [2025-08-25 02:51:42][][4523 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-25 02:51:42][][4523 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 02:56:05][350656771709628][1 ms][INFO] === Request start === [2025-08-25 02:56:05][350656771709628][1 ms][DEBUG] START check_scloud [2025-08-25 02:56:05][350656771709628][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 02:56:05][350656771709628][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 25586 14427 24346008 131020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 02:56:05][350656771709628][262 ms][DEBUG] targetPkg: running [2025-08-25 02:56:05][350656771709628][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-25 02:56:05][350656771709628][262 ms][DEBUG] START check_boot_completed [2025-08-25 02:56:05][350656771709628][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 02:56:05][350656771709628][293 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 02:56:05][350656771709628][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 02:56:05][350656771709628][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 02:56:05][350656771709628][340 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 02:56:05][350656771709628][341 ms][DEBUG] START check_internet [2025-08-25 02:56:05][350656771709628][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 02:56:05][350656771709628][793 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.694/200.694/200.694/0.000 ms\n [2025-08-25 02:56:05][350656771709628][793 ms][DEBUG] check_internet: online [2025-08-25 02:56:05][350656771709628][793 ms][DEBUG] END check_internet in 453 ms [2025-08-25 02:56:05][350656771709628][793 ms][DEBUG] rawBody.length=1149 [2025-08-25 02:56:05][350656771709628][794 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350656771709628\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5417\"}'\'' -e'"" [2025-08-25 02:56:05][350656771709628][794 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 02:56:05][350656771709628][794 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350656771709628\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5417\"}'\'' -e'"" [2025-08-25 02:56:12][350656771709628][7791 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb87264f-6730-4477-b993-88295a36e573","id":"QR_fb87264f-6730-4477-b993-88295a36e573","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 02:56:12][350656771709628][7948 ms][DEBUG] proc_open done in 7154 ms; code=255; res.len=3343 [2025-08-25 02:56:12][350656771709628][7948 ms][DEBUG] END runCmdUntilRes#1 in 7154 ms [2025-08-25 02:56:12][350656771709628][7948 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 03:15:03][355506800831577][1 ms][INFO] === Request start === [2025-08-25 03:15:03][355506800831577][1 ms][DEBUG] START check_scloud [2025-08-25 03:15:03][355506800831577][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 03:15:03][355506800831577][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 25586 14427 24451752 142880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 03:15:03][355506800831577][249 ms][DEBUG] targetPkg: running [2025-08-25 03:15:03][355506800831577][249 ms][DEBUG] END check_scloud in 248 ms [2025-08-25 03:15:03][355506800831577][249 ms][DEBUG] START check_boot_completed [2025-08-25 03:15:03][355506800831577][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 03:15:03][355506800831577][280 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 03:15:03][355506800831577][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 03:15:03][355506800831577][327 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 03:15:03][355506800831577][328 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 03:15:03][355506800831577][328 ms][DEBUG] rawBody.length=1148 [2025-08-25 03:15:03][355506800831577][328 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506800831577\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8469\"}'\'' -e'"" [2025-08-25 03:15:03][355506800831577][328 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 03:15:03][355506800831577][328 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506800831577\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8469\"}'\'' -e'"" [2025-08-25 03:15:08][355506800831577][5482 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94019b23-54ec-4f9b-9b2b-cdd6ff980760","id":"QR_94019b23-54ec-4f9b-9b2b-cdd6ff980760","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 03:15:08][355506800831577][5639 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-25 03:15:08][355506800831577][5639 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-25 03:15:08][355506800831577][5639 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 03:24:04][355824555742182][1 ms][INFO] === Request start === [2025-08-25 03:24:04][355824555742182][1 ms][DEBUG] START check_scloud [2025-08-25 03:24:04][355824555742182][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 03:24:05][355824555742182][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 25586 14427 24585996 153456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 03:24:05][355824555742182][284 ms][DEBUG] targetPkg: running [2025-08-25 03:24:05][355824555742182][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-25 03:24:05][355824555742182][284 ms][DEBUG] START check_boot_completed [2025-08-25 03:24:05][355824555742182][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 03:24:05][355824555742182][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 03:24:05][355824555742182][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 03:24:05][355824555742182][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 03:24:05][355824555742182][378 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 03:24:05][355824555742182][378 ms][DEBUG] START check_internet [2025-08-25 03:24:05][355824555742182][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 03:24:06][355824555742182][1175 ms][DEBUG] SU: done in 796 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.666/201.666/201.666/0.000 ms\n [2025-08-25 03:24:06][355824555742182][1175 ms][DEBUG] check_internet: online [2025-08-25 03:24:06][355824555742182][1175 ms][DEBUG] END check_internet in 797 ms [2025-08-25 03:24:06][355824555742182][1175 ms][DEBUG] rawBody.length=1149 [2025-08-25 03:24:06][355824555742182][1175 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824555742182\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6719\"}'\'' -e'"" [2025-08-25 03:24:06][355824555742182][1175 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 03:24:06][355824555742182][1175 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824555742182\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6719\"}'\'' -e'"" [2025-08-25 03:24:12][355824555742182][8063 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c1e6d235-dc5c-4c67-a9c0-34cf4c3f66a6","id":"QR_c1e6d235-dc5c-4c67-a9c0-34cf4c3f66a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 03:24:13][355824555742182][8220 ms][DEBUG] proc_open done in 7044 ms; code=255; res.len=3343 [2025-08-25 03:24:13][355824555742182][8220 ms][DEBUG] END runCmdUntilRes#1 in 7045 ms [2025-08-25 03:24:13][355824555742182][8220 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 03:27:02][350753204693824][1 ms][INFO] === Request start === [2025-08-25 03:27:02][350753204693824][1 ms][DEBUG] START check_scloud [2025-08-25 03:27:02][350753204693824][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 03:27:03][350753204693824][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 25586 14427 24747584 165444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 03:27:03][350753204693824][249 ms][DEBUG] targetPkg: running [2025-08-25 03:27:03][350753204693824][249 ms][DEBUG] END check_scloud in 248 ms [2025-08-25 03:27:03][350753204693824][249 ms][DEBUG] START check_boot_completed [2025-08-25 03:27:03][350753204693824][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 03:27:03][350753204693824][281 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 03:27:03][350753204693824][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 03:27:03][350753204693824][328 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 03:27:03][350753204693824][328 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 03:27:03][350753204693824][329 ms][DEBUG] rawBody.length=1148 [2025-08-25 03:27:03][350753204693824][329 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753204693824\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3525\"}'\'' -e'"" [2025-08-25 03:27:03][350753204693824][329 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 03:27:03][350753204693824][329 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753204693824\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3525\"}'\'' -e'"" [2025-08-25 03:27:07][350753204693824][4608 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0798c753-ac8c-4704-b5c9-c1acb5b8182f","id":"QR_0798c753-ac8c-4704-b5c9-c1acb5b8182f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 03:27:07][350753204693824][4764 ms][DEBUG] proc_open done in 4435 ms; code=255; res.len=3343 [2025-08-25 03:27:07][350753204693824][4764 ms][DEBUG] END runCmdUntilRes#1 in 4435 ms [2025-08-25 03:27:07][350753204693824][4764 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 03:36:02][352192669157322][1 ms][INFO] === Request start === [2025-08-25 03:36:02][352192669157322][1 ms][DEBUG] START check_scloud [2025-08-25 03:36:02][352192669157322][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 03:36:03][352192669157322][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 25586 14427 24835800 147840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 03:36:03][352192669157322][313 ms][DEBUG] targetPkg: running [2025-08-25 03:36:03][352192669157322][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 03:36:03][352192669157322][313 ms][DEBUG] START check_boot_completed [2025-08-25 03:36:03][352192669157322][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 03:36:03][352192669157322][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 03:36:03][352192669157322][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 03:36:03][352192669157322][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 03:36:03][352192669157322][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 03:36:03][352192669157322][406 ms][DEBUG] START check_internet [2025-08-25 03:36:03][352192669157322][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 03:36:03][352192669157322][828 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.386/201.386/201.386/0.000 ms\n [2025-08-25 03:36:03][352192669157322][828 ms][DEBUG] check_internet: online [2025-08-25 03:36:03][352192669157322][828 ms][DEBUG] END check_internet in 422 ms [2025-08-25 03:36:03][352192669157322][828 ms][DEBUG] rawBody.length=1148 [2025-08-25 03:36:03][352192669157322][828 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669157322\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6305\"}'\'' -e'"" [2025-08-25 03:36:03][352192669157322][828 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 03:36:03][352192669157322][828 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669157322\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6305\"}'\'' -e'"" [2025-08-25 03:36:07][352192669157322][4967 ms][DEBUG] proc_open done in 4140 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 03:36:07][352192669157322][4967 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-08-25 03:36:07][352192669157322][4968 ms][WARN] Detected error: Process with pid 25586 either refused to load frida-agent, or terminated during injection [2025-08-25 03:36:07][352192669157322][4968 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 03:36:08][352192669157322][5124 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 03:36:08][352192669157322][5124 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 03:36:08][352192669157322][5124 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 03:36:08][352192669157322][5264 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 03:36:08][352192669157322][5264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 03:36:08][352192669157322][5577 ms][DEBUG] SU: done in 312 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 03:36:10][352192669157322][7592 ms][DEBUG] START check_boot_completed [2025-08-25 03:36:10][352192669157322][7592 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 03:36:10][352192669157322][7639 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 03:36:10][352192669157322][7639 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 03:36:10][352192669157322][7686 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 03:36:10][352192669157322][7686 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 03:36:13][352192669157322][10700 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 03:36:13][352192669157322][10700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669157322\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6305\"}'\'' -e'"" [2025-08-25 03:36:17][352192669157322][14793 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff734401-588d-4aa8-8420-459dab8e7cfe","id":"QR_ff734401-588d-4aa8-8420-459dab8e7cfe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 03:36:17][352192669157322][14950 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-25 03:36:17][352192669157322][14950 ms][DEBUG] END runCmdUntilRes#2 in 4249 ms [2025-08-25 03:36:17][352192669157322][14950 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 03:36:21][355120934427615][0 ms][INFO] === Request start === [2025-08-25 03:36:21][355120934427615][1 ms][DEBUG] START check_scloud [2025-08-25 03:36:21][355120934427615][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 03:36:21][355120934427615][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 31543 14427 23645660 125200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 03:36:21][355120934427615][263 ms][DEBUG] targetPkg: running [2025-08-25 03:36:21][355120934427615][263 ms][DEBUG] END check_scloud in 263 ms [2025-08-25 03:36:21][355120934427615][263 ms][DEBUG] START check_boot_completed [2025-08-25 03:36:21][355120934427615][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 03:36:21][355120934427615][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 03:36:21][355120934427615][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 03:36:21][355120934427615][357 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 03:36:21][355120934427615][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 03:36:21][355120934427615][357 ms][DEBUG] START check_internet [2025-08-25 03:36:21][355120934427615][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 03:36:22][355120934427615][685 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.573/232.573/232.573/0.000 ms\n [2025-08-25 03:36:22][355120934427615][685 ms][DEBUG] check_internet: online [2025-08-25 03:36:22][355120934427615][685 ms][DEBUG] END check_internet in 328 ms [2025-08-25 03:36:22][355120934427615][685 ms][DEBUG] rawBody.length=1158 [2025-08-25 03:36:22][355120934427615][685 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355120934427615\",\"model\":\"SM-X710\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R54X202R5QT\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6316\"}'\'' -e'"" [2025-08-25 03:36:22][355120934427615][685 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 03:36:22][355120934427615][685 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355120934427615\",\"model\":\"SM-X710\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R54X202R5QT\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6316\"}'\'' -e'"" [2025-08-25 03:36:25][355120934427615][4262 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1eae6ef7-99f2-4211-98c1-be9bdb5c5ec3","id":"QR_1eae6ef7-99f2-4211-98c1-be9bdb5c5ec3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 03:36:25][355120934427615][4418 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-25 03:36:25][355120934427615][4418 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-25 03:36:25][355120934427615][4418 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 03:42:03][353475122025999][1 ms][INFO] === Request start === [2025-08-25 03:42:03][353475122025999][1 ms][DEBUG] START check_scloud [2025-08-25 03:42:03][353475122025999][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 03:42:04][353475122025999][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 31543 14427 23681388 138880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 03:42:04][353475122025999][301 ms][DEBUG] targetPkg: running [2025-08-25 03:42:04][353475122025999][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-25 03:42:04][353475122025999][301 ms][DEBUG] START check_boot_completed [2025-08-25 03:42:04][353475122025999][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 03:42:04][353475122025999][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 03:42:04][353475122025999][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 03:42:04][353475122025999][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 03:42:04][353475122025999][395 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 03:42:04][353475122025999][395 ms][DEBUG] START check_internet [2025-08-25 03:42:04][353475122025999][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 03:42:04][353475122025999][879 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.574/199.574/199.574/0.000 ms\n [2025-08-25 03:42:04][353475122025999][879 ms][DEBUG] check_internet: online [2025-08-25 03:42:04][353475122025999][879 ms][DEBUG] END check_internet in 484 ms [2025-08-25 03:42:04][353475122025999][879 ms][DEBUG] rawBody.length=1148 [2025-08-25 03:42:04][353475122025999][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475122025999\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9334\"}'\'' -e'"" [2025-08-25 03:42:04][353475122025999][879 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 03:42:04][353475122025999][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475122025999\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9334\"}'\'' -e'"" [2025-08-25 03:42:08][353475122025999][4878 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1e068b0-f92e-4199-9310-8295b27726c1","id":"QR_b1e068b0-f92e-4199-9310-8295b27726c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 03:42:08][353475122025999][5034 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-25 03:42:08][353475122025999][5034 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-25 03:42:08][353475122025999][5034 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 03:48:03][352438113489500][1 ms][INFO] === Request start === [2025-08-25 03:48:03][352438113489500][1 ms][DEBUG] START check_scloud [2025-08-25 03:48:03][352438113489500][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 03:48:03][352438113489500][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 31543 14427 23823760 149980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 03:48:03][352438113489500][315 ms][DEBUG] targetPkg: running [2025-08-25 03:48:03][352438113489500][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 03:48:03][352438113489500][315 ms][DEBUG] START check_boot_completed [2025-08-25 03:48:03][352438113489500][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 03:48:03][352438113489500][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 03:48:03][352438113489500][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 03:48:03][352438113489500][409 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 03:48:03][352438113489500][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 03:48:03][352438113489500][410 ms][DEBUG] START check_internet [2025-08-25 03:48:03][352438113489500][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 03:48:04][352438113489500][892 ms][DEBUG] SU: done in 483 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.113/201.113/201.113/0.000 ms\n [2025-08-25 03:48:04][352438113489500][893 ms][DEBUG] check_internet: online [2025-08-25 03:48:04][352438113489500][893 ms][DEBUG] END check_internet in 483 ms [2025-08-25 03:48:04][352438113489500][893 ms][DEBUG] rawBody.length=1148 [2025-08-25 03:48:04][352438113489500][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352438113489500\",\"model\":\"SM-F700F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XEV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5732\"}'\'' -e'"" [2025-08-25 03:48:04][352438113489500][893 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 03:48:04][352438113489500][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352438113489500\",\"model\":\"SM-F700F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XEV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5732\"}'\'' -e'"" [2025-08-25 03:48:07][352438113489500][4829 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1280f3e-42a4-44c6-9b1f-b15d59096706","id":"QR_b1280f3e-42a4-44c6-9b1f-b15d59096706","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 03:48:08][352438113489500][4985 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-25 03:48:08][352438113489500][4985 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-25 03:48:08][352438113489500][4985 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 03:53:05][357576783068222][1 ms][INFO] === Request start === [2025-08-25 03:53:05][357576783068222][1 ms][DEBUG] START check_scloud [2025-08-25 03:53:05][357576783068222][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 03:53:05][357576783068222][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 31543 14427 23974452 161972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 03:53:05][357576783068222][304 ms][DEBUG] targetPkg: running [2025-08-25 03:53:05][357576783068222][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 03:53:05][357576783068222][304 ms][DEBUG] START check_boot_completed [2025-08-25 03:53:05][357576783068222][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 03:53:05][357576783068222][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 03:53:05][357576783068222][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 03:53:05][357576783068222][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 03:53:05][357576783068222][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 03:53:05][357576783068222][382 ms][DEBUG] rawBody.length=1149 [2025-08-25 03:53:05][357576783068222][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576783068222\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6886\"}'\'' -e'"" [2025-08-25 03:53:05][357576783068222][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 03:53:05][357576783068222][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576783068222\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6886\"}'\'' -e'"" [2025-08-25 03:53:11][357576783068222][5490 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a93874e9-7681-48b8-97e2-307287f0fc89","id":"QR_a93874e9-7681-48b8-97e2-307287f0fc89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 03:53:11][357576783068222][5646 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-08-25 03:53:11][357576783068222][5646 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-08-25 03:53:11][357576783068222][5646 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 03:58:03][352817340825141][1 ms][INFO] === Request start === [2025-08-25 03:58:03][352817340825141][1 ms][DEBUG] START check_scloud [2025-08-25 03:58:03][352817340825141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 03:58:03][352817340825141][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 31543 14427 24126260 172916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 03:58:03][352817340825141][314 ms][DEBUG] targetPkg: running [2025-08-25 03:58:03][352817340825141][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 03:58:03][352817340825141][314 ms][DEBUG] START check_boot_completed [2025-08-25 03:58:03][352817340825141][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 03:58:03][352817340825141][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 03:58:03][352817340825141][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 03:58:03][352817340825141][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 03:58:03][352817340825141][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 03:58:03][352817340825141][392 ms][DEBUG] START check_internet [2025-08-25 03:58:03][352817340825141][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 03:58:04][352817340825141][814 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.775/201.775/201.775/0.000 ms\n [2025-08-25 03:58:04][352817340825141][814 ms][DEBUG] check_internet: online [2025-08-25 03:58:04][352817340825141][814 ms][DEBUG] END check_internet in 422 ms [2025-08-25 03:58:04][352817340825141][814 ms][DEBUG] rawBody.length=1148 [2025-08-25 03:58:04][352817340825141][814 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352817340825141\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6105\"}'\'' -e'"" [2025-08-25 03:58:04][352817340825141][814 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 03:58:04][352817340825141][814 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352817340825141\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6105\"}'\'' -e'"" [2025-08-25 03:58:13][352817340825141][10062 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca05d8a5-1646-4be1-8a25-bd47927f0839","id":"QR_ca05d8a5-1646-4be1-8a25-bd47927f0839","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 03:58:13][352817340825141][10218 ms][DEBUG] proc_open done in 9403 ms; code=255; res.len=3343 [2025-08-25 03:58:13][352817340825141][10218 ms][DEBUG] END runCmdUntilRes#1 in 9404 ms [2025-08-25 03:58:13][352817340825141][10218 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 04:10:03][354809110102833][1 ms][INFO] === Request start === [2025-08-25 04:10:03][354809110102833][1 ms][DEBUG] START check_scloud [2025-08-25 04:10:03][354809110102833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 04:10:04][354809110102833][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 31543 14427 24273740 184448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 04:10:04][354809110102833][303 ms][DEBUG] targetPkg: running [2025-08-25 04:10:04][354809110102833][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 04:10:04][354809110102833][303 ms][DEBUG] START check_boot_completed [2025-08-25 04:10:04][354809110102833][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 04:10:04][354809110102833][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 04:10:04][354809110102833][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 04:10:04][354809110102833][428 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 04:10:04][354809110102833][428 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 04:10:04][354809110102833][428 ms][DEBUG] START check_internet [2025-08-25 04:10:04][354809110102833][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 04:10:04][354809110102833][959 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.932/200.932/200.932/0.000 ms\n [2025-08-25 04:10:04][354809110102833][959 ms][DEBUG] check_internet: online [2025-08-25 04:10:04][354809110102833][959 ms][DEBUG] END check_internet in 531 ms [2025-08-25 04:10:04][354809110102833][959 ms][DEBUG] rawBody.length=1148 [2025-08-25 04:10:04][354809110102833][959 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354809110102833\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TEL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9547\"}'\'' -e'"" [2025-08-25 04:10:04][354809110102833][959 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 04:10:04][354809110102833][959 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354809110102833\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TEL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9547\"}'\'' -e'"" [2025-08-25 04:10:08][354809110102833][5051 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6341fb4f-beb6-44a7-ac01-2e59994964e8","id":"QR_6341fb4f-beb6-44a7-ac01-2e59994964e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 04:10:09][354809110102833][5208 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-25 04:10:09][354809110102833][5208 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-25 04:10:09][354809110102833][5208 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 04:19:03][350247871341288][1 ms][INFO] === Request start === [2025-08-25 04:19:03][350247871341288][1 ms][DEBUG] START check_scloud [2025-08-25 04:19:03][350247871341288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 04:19:04][350247871341288][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 31543 14427 24414256 196588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 04:19:04][350247871341288][304 ms][DEBUG] targetPkg: running [2025-08-25 04:19:04][350247871341288][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 04:19:04][350247871341288][304 ms][DEBUG] START check_boot_completed [2025-08-25 04:19:04][350247871341288][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 04:19:04][350247871341288][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 04:19:04][350247871341288][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 04:19:04][350247871341288][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 04:19:04][350247871341288][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 04:19:04][350247871341288][382 ms][DEBUG] rawBody.length=1148 [2025-08-25 04:19:04][350247871341288][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247871341288\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9552\"}'\'' -e'"" [2025-08-25 04:19:04][350247871341288][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 04:19:04][350247871341288][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247871341288\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9552\"}'\'' -e'"" [2025-08-25 04:19:08][350247871341288][4756 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9c4d18b-de8b-4824-a1b6-bd8cfe77e417","id":"QR_e9c4d18b-de8b-4824-a1b6-bd8cfe77e417","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 04:19:08][350247871341288][4912 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-08-25 04:19:08][350247871341288][4912 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-25 04:19:08][350247871341288][4912 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 04:26:03][355714282808374][1 ms][INFO] === Request start === [2025-08-25 04:26:03][355714282808374][1 ms][DEBUG] START check_scloud [2025-08-25 04:26:03][355714282808374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 04:26:03][355714282808374][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 31543 14427 24538388 207348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 04:26:03][355714282808374][306 ms][DEBUG] targetPkg: running [2025-08-25 04:26:03][355714282808374][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 04:26:03][355714282808374][306 ms][DEBUG] START check_boot_completed [2025-08-25 04:26:03][355714282808374][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 04:26:03][355714282808374][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 04:26:03][355714282808374][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 04:26:03][355714282808374][400 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 04:26:03][355714282808374][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 04:26:03][355714282808374][400 ms][DEBUG] START check_internet [2025-08-25 04:26:03][355714282808374][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 04:26:04][355714282808374][868 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.166/201.166/201.166/0.000 ms\n [2025-08-25 04:26:04][355714282808374][868 ms][DEBUG] check_internet: online [2025-08-25 04:26:04][355714282808374][868 ms][DEBUG] END check_internet in 468 ms [2025-08-25 04:26:04][355714282808374][868 ms][DEBUG] rawBody.length=1148 [2025-08-25 04:26:04][355714282808374][868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355714282808374\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8453\"}'\'' -e'"" [2025-08-25 04:26:04][355714282808374][868 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 04:26:04][355714282808374][869 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355714282808374\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8453\"}'\'' -e'"" [2025-08-25 04:26:08][355714282808374][5195 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dea1c0bf-988f-4233-9809-c88de4fa0541","id":"QR_dea1c0bf-988f-4233-9809-c88de4fa0541","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 04:26:08][355714282808374][5351 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-25 04:26:08][355714282808374][5351 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-25 04:26:08][355714282808374][5351 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 04:26:11][354485112748178][0 ms][INFO] === Request start === [2025-08-25 04:26:11][354485112748178][1 ms][DEBUG] START check_scloud [2025-08-25 04:26:11][354485112748178][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 04:26:11][354485112748178][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 31543 14427 24716904 219020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 04:26:11][354485112748178][312 ms][DEBUG] targetPkg: running [2025-08-25 04:26:11][354485112748178][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 04:26:11][354485112748178][312 ms][DEBUG] START check_boot_completed [2025-08-25 04:26:11][354485112748178][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 04:26:12][354485112748178][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 04:26:12][354485112748178][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 04:26:12][354485112748178][391 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 04:26:12][354485112748178][391 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 04:26:12][354485112748178][391 ms][DEBUG] START check_internet [2025-08-25 04:26:12][354485112748178][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 04:26:12][354485112748178][671 ms][DEBUG] SU: done in 280 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=165 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 165.768/165.768/165.768/0.000 ms\n [2025-08-25 04:26:12][354485112748178][671 ms][DEBUG] check_internet: online [2025-08-25 04:26:12][354485112748178][671 ms][DEBUG] END check_internet in 280 ms [2025-08-25 04:26:12][354485112748178][671 ms][DEBUG] rawBody.length=1148 [2025-08-25 04:26:12][354485112748178][671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485112748178\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7837\"}'\'' -e'"" [2025-08-25 04:26:12][354485112748178][671 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 04:26:12][354485112748178][671 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485112748178\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7837\"}'\'' -e'"" [2025-08-25 04:26:16][354485112748178][4342 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9df692c6-7a5c-48b2-b055-c0dc3851525f","id":"QR_9df692c6-7a5c-48b2-b055-c0dc3851525f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 04:26:16][354485112748178][4498 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-25 04:26:16][354485112748178][4498 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-25 04:26:16][354485112748178][4498 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 04:51:03][355326625558762][1 ms][INFO] === Request start === [2025-08-25 04:51:03][355326625558762][1 ms][DEBUG] START check_scloud [2025-08-25 04:51:03][355326625558762][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 04:51:04][355326625558762][320 ms][DEBUG] SU: done in 318 ms; outu0_a118 31543 14427 24813084 176464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 04:51:04][355326625558762][320 ms][DEBUG] targetPkg: running [2025-08-25 04:51:04][355326625558762][320 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 04:51:04][355326625558762][320 ms][DEBUG] START check_boot_completed [2025-08-25 04:51:04][355326625558762][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 04:51:04][355326625558762][351 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 04:51:04][355326625558762][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 04:51:04][355326625558762][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 04:51:04][355326625558762][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 04:51:04][355326625558762][398 ms][DEBUG] rawBody.length=1148 [2025-08-25 04:51:04][355326625558762][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326625558762\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1762\"}'\'' -e'"" [2025-08-25 04:51:04][355326625558762][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 04:51:04][355326625558762][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326625558762\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1762\"}'\'' -e'"" [2025-08-25 04:51:08][355326625558762][4553 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80ce0686-df02-4ddf-81a8-23f373f96343","id":"QR_80ce0686-df02-4ddf-81a8-23f373f96343","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 04:51:08][355326625558762][4709 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 04:51:08][355326625558762][4709 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 04:51:08][355326625558762][4709 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 04:59:03][351451341377646][1 ms][INFO] === Request start === [2025-08-25 04:59:03][351451341377646][1 ms][DEBUG] START check_scloud [2025-08-25 04:59:03][351451341377646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 04:59:03][351451341377646][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 31543 14427 24957508 174236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 04:59:03][351451341377646][313 ms][DEBUG] targetPkg: running [2025-08-25 04:59:03][351451341377646][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 04:59:03][351451341377646][313 ms][DEBUG] START check_boot_completed [2025-08-25 04:59:03][351451341377646][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 04:59:03][351451341377646][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 04:59:03][351451341377646][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 04:59:03][351451341377646][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 04:59:03][351451341377646][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 04:59:03][351451341377646][407 ms][DEBUG] rawBody.length=1148 [2025-08-25 04:59:03][351451341377646][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351451341377646\",\"model\":\"SM-F956B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7333\"}'\'' -e'"" [2025-08-25 04:59:03][351451341377646][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 04:59:03][351451341377646][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351451341377646\",\"model\":\"SM-F956B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7333\"}'\'' -e'"" [2025-08-25 04:59:07][351451341377646][4250 ms][DEBUG] proc_open done in 3842 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 04:59:07][351451341377646][4250 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-25 04:59:07][351451341377646][4250 ms][WARN] Detected error: Process with pid 31543 either refused to load frida-agent, or terminated during injection [2025-08-25 04:59:07][351451341377646][4250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 04:59:07][351451341377646][4406 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 04:59:07][351451341377646][4406 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 04:59:07][351451341377646][4406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 04:59:07][351451341377646][4546 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 04:59:07][351451341377646][4547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 04:59:08][351451341377646][4734 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 04:59:10][351451341377646][6749 ms][DEBUG] START check_boot_completed [2025-08-25 04:59:10][351451341377646][6749 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 04:59:10][351451341377646][6796 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 04:59:10][351451341377646][6796 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 04:59:10][351451341377646][6843 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 04:59:10][351451341377646][6843 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 04:59:13][351451341377646][9857 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 04:59:13][351451341377646][9858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351451341377646\",\"model\":\"SM-F956B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7333\"}'\'' -e'"" [2025-08-25 04:59:17][351451341377646][14169 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9ba9ead-5abd-485d-a85e-09d453c05c00","id":"QR_a9ba9ead-5abd-485d-a85e-09d453c05c00","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 04:59:17][351451341377646][14325 ms][DEBUG] proc_open done in 4468 ms; code=255; res.len=3343 [2025-08-25 04:59:17][351451341377646][14325 ms][DEBUG] END runCmdUntilRes#2 in 4468 ms [2025-08-25 04:59:17][351451341377646][14326 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:11:03][357576770891487][1 ms][INFO] === Request start === [2025-08-25 05:11:03][357576770891487][1 ms][DEBUG] START check_scloud [2025-08-25 05:11:03][357576770891487][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:11:03][357576770891487][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 2777 14427 23522904 126684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:11:03][357576770891487][305 ms][DEBUG] targetPkg: running [2025-08-25 05:11:03][357576770891487][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 05:11:03][357576770891487][305 ms][DEBUG] START check_boot_completed [2025-08-25 05:11:03][357576770891487][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:11:03][357576770891487][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 05:11:03][357576770891487][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:11:03][357576770891487][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 05:11:03][357576770891487][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 05:11:03][357576770891487][399 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:11:03][357576770891487][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576770891487\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PNG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2484\"}'\'' -e'"" [2025-08-25 05:11:03][357576770891487][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:11:03][357576770891487][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576770891487\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PNG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2484\"}'\'' -e'"" [2025-08-25 05:11:07][357576770891487][4445 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fbe40530-dc35-46f4-ad2a-f141f77f03a7","id":"QR_fbe40530-dc35-46f4-ad2a-f141f77f03a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:11:07][357576770891487][4601 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-25 05:11:07][357576770891487][4601 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 05:11:07][357576770891487][4601 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:11:10][350226696279964][0 ms][INFO] === Request start === [2025-08-25 05:11:10][350226696279964][1 ms][DEBUG] START check_scloud [2025-08-25 05:11:10][350226696279964][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:11:10][350226696279964][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 2777 14427 23703276 137568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:11:10][350226696279964][255 ms][DEBUG] targetPkg: running [2025-08-25 05:11:10][350226696279964][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-25 05:11:10][350226696279964][255 ms][DEBUG] START check_boot_completed [2025-08-25 05:11:10][350226696279964][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:11:10][350226696279964][302 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 05:11:10][350226696279964][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:11:10][350226696279964][364 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 05:11:10][350226696279964][364 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 05:11:10][350226696279964][364 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:11:10][350226696279964][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226696279964\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3929\"}'\'' -e'"" [2025-08-25 05:11:10][350226696279964][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:11:10][350226696279964][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226696279964\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3929\"}'\'' -e'"" [2025-08-25 05:11:14][350226696279964][4098 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df8512f5-3099-4916-b453-07753e0bb8e3","id":"QR_df8512f5-3099-4916-b453-07753e0bb8e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:11:14][350226696279964][4254 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-25 05:11:14][350226696279964][4254 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-25 05:11:14][350226696279964][4254 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:20:03][350320369187883][1 ms][INFO] === Request start === [2025-08-25 05:20:03][350320369187883][1 ms][DEBUG] START check_scloud [2025-08-25 05:20:03][350320369187883][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:20:03][350320369187883][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 2777 14427 23779040 149056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:20:03][350320369187883][304 ms][DEBUG] targetPkg: running [2025-08-25 05:20:03][350320369187883][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 05:20:03][350320369187883][304 ms][DEBUG] START check_boot_completed [2025-08-25 05:20:03][350320369187883][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:20:03][350320369187883][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 05:20:03][350320369187883][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:20:03][350320369187883][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 05:20:03][350320369187883][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 05:20:03][350320369187883][383 ms][DEBUG] START check_internet [2025-08-25 05:20:03][350320369187883][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 05:20:04][350320369187883][867 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.865/201.865/201.865/0.000 ms\n [2025-08-25 05:20:04][350320369187883][867 ms][DEBUG] check_internet: online [2025-08-25 05:20:04][350320369187883][867 ms][DEBUG] END check_internet in 484 ms [2025-08-25 05:20:04][350320369187883][867 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:20:04][350320369187883][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320369187883\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5247\"}'\'' -e'"" [2025-08-25 05:20:04][350320369187883][867 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:20:04][350320369187883][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320369187883\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5247\"}'\'' -e'"" [2025-08-25 05:20:08][350320369187883][4928 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be017a45-66c5-4926-a1d7-6696942c2f7e","id":"QR_be017a45-66c5-4926-a1d7-6696942c2f7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:20:08][350320369187883][5084 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-25 05:20:08][350320369187883][5084 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-25 05:20:08][350320369187883][5084 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:27:03][357967971861363][1 ms][INFO] === Request start === [2025-08-25 05:27:03][357967971861363][1 ms][DEBUG] START check_scloud [2025-08-25 05:27:03][357967971861363][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:27:03][357967971861363][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 2777 14427 23911300 159928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:27:03][357967971861363][305 ms][DEBUG] targetPkg: running [2025-08-25 05:27:03][357967971861363][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 05:27:03][357967971861363][305 ms][DEBUG] START check_boot_completed [2025-08-25 05:27:03][357967971861363][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:27:03][357967971861363][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 05:27:03][357967971861363][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:27:03][357967971861363][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 05:27:03][357967971861363][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 05:27:03][357967971861363][384 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:27:03][357967971861363][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967971861363\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3733\"}'\'' -e'"" [2025-08-25 05:27:03][357967971861363][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:27:03][357967971861363][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967971861363\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3733\"}'\'' -e'"" [2025-08-25 05:27:07][357967971861363][4461 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf1a0934-f24e-46d4-bd73-12e95782613e","id":"QR_bf1a0934-f24e-46d4-bd73-12e95782613e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:27:07][357967971861363][4617 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 05:27:07][357967971861363][4617 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 05:27:07][357967971861363][4617 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:28:03][353182207093856][0 ms][INFO] === Request start === [2025-08-25 05:28:03][353182207093856][1 ms][DEBUG] START check_scloud [2025-08-25 05:28:03][353182207093856][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:28:03][353182207093856][252 ms][DEBUG] SU: done in 252 ms; outu0_a118 2777 14427 24089780 172184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:28:03][353182207093856][252 ms][DEBUG] targetPkg: running [2025-08-25 05:28:03][353182207093856][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-25 05:28:03][353182207093856][253 ms][DEBUG] START check_boot_completed [2025-08-25 05:28:03][353182207093856][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:28:03][353182207093856][299 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 05:28:03][353182207093856][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:28:03][353182207093856][377 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 05:28:03][353182207093856][377 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-25 05:28:03][353182207093856][377 ms][DEBUG] START check_internet [2025-08-25 05:28:03][353182207093856][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 05:28:04][353182207093856][908 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.263/207.263/207.263/0.000 ms\n [2025-08-25 05:28:04][353182207093856][909 ms][DEBUG] check_internet: online [2025-08-25 05:28:04][353182207093856][909 ms][DEBUG] END check_internet in 531 ms [2025-08-25 05:28:04][353182207093856][909 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:28:04][353182207093856][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182207093856\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7292\"}'\'' -e'"" [2025-08-25 05:28:04][353182207093856][909 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:28:04][353182207093856][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182207093856\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7292\"}'\'' -e'"" [2025-08-25 05:28:08][353182207093856][4689 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1730768c-71d1-4e90-ae47-bb13b689b78f","id":"QR_1730768c-71d1-4e90-ae47-bb13b689b78f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:28:08][353182207093856][4845 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-25 05:28:08][353182207093856][4845 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-25 05:28:08][353182207093856][4845 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:28:10][355999110115791][0 ms][INFO] === Request start === [2025-08-25 05:28:10][355999110115791][1 ms][DEBUG] START check_scloud [2025-08-25 05:28:10][355999110115791][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:28:11][355999110115791][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 2777 14427 24219068 182968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:28:11][355999110115791][287 ms][DEBUG] targetPkg: running [2025-08-25 05:28:11][355999110115791][287 ms][DEBUG] END check_scloud in 287 ms [2025-08-25 05:28:11][355999110115791][287 ms][DEBUG] START check_boot_completed [2025-08-25 05:28:11][355999110115791][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:28:11][355999110115791][333 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 05:28:11][355999110115791][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:28:11][355999110115791][395 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 05:28:11][355999110115791][395 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 05:28:11][355999110115791][395 ms][DEBUG] START check_internet [2025-08-25 05:28:11][355999110115791][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 05:28:11][355999110115791][725 ms][DEBUG] SU: done in 330 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.397/227.397/227.397/0.000 ms\n [2025-08-25 05:28:11][355999110115791][726 ms][DEBUG] check_internet: online [2025-08-25 05:28:11][355999110115791][726 ms][DEBUG] END check_internet in 330 ms [2025-08-25 05:28:11][355999110115791][726 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:28:11][355999110115791][726 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355999110115791\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1386\"}'\'' -e'"" [2025-08-25 05:28:11][355999110115791][726 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:28:11][355999110115791][726 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355999110115791\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1386\"}'\'' -e'"" [2025-08-25 05:28:15][355999110115791][4816 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_424ba229-c6f2-4991-ad28-ba65e761ac8e","id":"QR_424ba229-c6f2-4991-ad28-ba65e761ac8e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:28:15][355999110115791][4972 ms][DEBUG] proc_open done in 4247 ms; code=255; res.len=3343 [2025-08-25 05:28:15][355999110115791][4972 ms][DEBUG] END runCmdUntilRes#1 in 4247 ms [2025-08-25 05:28:15][355999110115791][4973 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:29:03][350246954609405][0 ms][INFO] === Request start === [2025-08-25 05:29:03][350246954609405][1 ms][DEBUG] START check_scloud [2025-08-25 05:29:03][350246954609405][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:29:03][350246954609405][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 2777 14427 24308348 194960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:29:03][350246954609405][293 ms][DEBUG] targetPkg: running [2025-08-25 05:29:03][350246954609405][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-25 05:29:03][350246954609405][293 ms][DEBUG] START check_boot_completed [2025-08-25 05:29:03][350246954609405][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:29:03][350246954609405][340 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 05:29:03][350246954609405][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:29:03][350246954609405][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 05:29:03][350246954609405][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 05:29:03][350246954609405][387 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:29:03][350246954609405][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246954609405\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8539\"}'\'' -e'"" [2025-08-25 05:29:03][350246954609405][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:29:03][350246954609405][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246954609405\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8539\"}'\'' -e'"" [2025-08-25 05:29:07][350246954609405][4307 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eab902c4-96c7-4f3b-ac11-2e648515735a","id":"QR_eab902c4-96c7-4f3b-ac11-2e648515735a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:29:07][350246954609405][4464 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-25 05:29:07][350246954609405][4464 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-25 05:29:07][350246954609405][4464 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:33:03][350411871505488][1 ms][INFO] === Request start === [2025-08-25 05:33:03][350411871505488][1 ms][DEBUG] START check_scloud [2025-08-25 05:33:03][350411871505488][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:33:04][350411871505488][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 2777 14427 24469216 206128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:33:04][350411871505488][281 ms][DEBUG] targetPkg: running [2025-08-25 05:33:04][350411871505488][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-25 05:33:04][350411871505488][281 ms][DEBUG] START check_boot_completed [2025-08-25 05:33:04][350411871505488][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:33:04][350411871505488][312 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 05:33:04][350411871505488][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:33:04][350411871505488][375 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 05:33:04][350411871505488][375 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 05:33:04][350411871505488][375 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:33:04][350411871505488][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350411871505488\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4019\"}'\'' -e'"" [2025-08-25 05:33:04][350411871505488][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:33:04][350411871505488][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350411871505488\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4019\"}'\'' -e'"" [2025-08-25 05:33:08][350411871505488][4608 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f56ccda-e101-4a95-bb61-07adbdf8d7cb","id":"QR_9f56ccda-e101-4a95-bb61-07adbdf8d7cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:33:08][350411871505488][4764 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-25 05:33:08][350411871505488][4764 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-25 05:33:08][350411871505488][4764 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:39:03][351234167134998][1 ms][INFO] === Request start === [2025-08-25 05:39:03][351234167134998][1 ms][DEBUG] START check_scloud [2025-08-25 05:39:03][351234167134998][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:39:04][351234167134998][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 2777 14427 24635844 217276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:39:04][351234167134998][304 ms][DEBUG] targetPkg: running [2025-08-25 05:39:04][351234167134998][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 05:39:04][351234167134998][304 ms][DEBUG] START check_boot_completed [2025-08-25 05:39:04][351234167134998][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:39:04][351234167134998][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 05:39:04][351234167134998][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:39:04][351234167134998][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 05:39:04][351234167134998][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 05:39:04][351234167134998][382 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:39:04][351234167134998][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234167134998\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8788\"}'\'' -e'"" [2025-08-25 05:39:04][351234167134998][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:39:04][351234167134998][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234167134998\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8788\"}'\'' -e'"" [2025-08-25 05:39:08][351234167134998][4647 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e582136-26a5-4a4b-a49c-8e63522c97c7","id":"QR_7e582136-26a5-4a4b-a49c-8e63522c97c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:39:08][351234167134998][4803 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-25 05:39:08][351234167134998][4803 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-25 05:39:08][351234167134998][4803 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:40:03][353204330097909][0 ms][INFO] === Request start === [2025-08-25 05:40:03][353204330097909][1 ms][DEBUG] START check_scloud [2025-08-25 05:40:03][353204330097909][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:40:03][353204330097909][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 2777 14427 24774312 228928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:40:03][353204330097909][288 ms][DEBUG] targetPkg: running [2025-08-25 05:40:03][353204330097909][288 ms][DEBUG] END check_scloud in 288 ms [2025-08-25 05:40:03][353204330097909][288 ms][DEBUG] START check_boot_completed [2025-08-25 05:40:03][353204330097909][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:40:03][353204330097909][320 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 05:40:03][353204330097909][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:40:03][353204330097909][382 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 05:40:03][353204330097909][382 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 05:40:03][353204330097909][382 ms][DEBUG] START check_internet [2025-08-25 05:40:03][353204330097909][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 05:40:04][353204330097909][866 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.683/201.683/201.683/0.000 ms\n [2025-08-25 05:40:04][353204330097909][867 ms][DEBUG] check_internet: online [2025-08-25 05:40:04][353204330097909][867 ms][DEBUG] END check_internet in 485 ms [2025-08-25 05:40:04][353204330097909][867 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:40:04][353204330097909][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204330097909\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4266\"}'\'' -e'"" [2025-08-25 05:40:04][353204330097909][867 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:40:04][353204330097909][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204330097909\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4266\"}'\'' -e'"" [2025-08-25 05:40:08][353204330097909][4881 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02ea1d74-2a27-490d-b7e0-22da025f0fc7","id":"QR_02ea1d74-2a27-490d-b7e0-22da025f0fc7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:40:08][353204330097909][5037 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-25 05:40:08][353204330097909][5037 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-25 05:40:08][353204330097909][5037 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:40:10][353372915718775][0 ms][INFO] === Request start === [2025-08-25 05:40:10][353372915718775][1 ms][DEBUG] START check_scloud [2025-08-25 05:40:10][353372915718775][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:40:11][353372915718775][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 2777 14427 24927156 239340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:40:11][353372915718775][278 ms][DEBUG] targetPkg: running [2025-08-25 05:40:11][353372915718775][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-25 05:40:11][353372915718775][278 ms][DEBUG] START check_boot_completed [2025-08-25 05:40:11][353372915718775][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:40:11][353372915718775][324 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 05:40:11][353372915718775][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:40:11][353372915718775][387 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 05:40:11][353372915718775][387 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 05:40:11][353372915718775][387 ms][DEBUG] START check_internet [2025-08-25 05:40:11][353372915718775][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 05:40:11][353372915718775][762 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.944/254.944/254.944/0.000 ms\n [2025-08-25 05:40:11][353372915718775][762 ms][DEBUG] check_internet: online [2025-08-25 05:40:11][353372915718775][762 ms][DEBUG] END check_internet in 375 ms [2025-08-25 05:40:11][353372915718775][762 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:40:11][353372915718775][762 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915718775\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2421\"}'\'' -e'"" [2025-08-25 05:40:11][353372915718775][762 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:40:11][353372915718775][762 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915718775\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2421\"}'\'' -e'"" [2025-08-25 05:40:15][353372915718775][4402 ms][DEBUG] proc_open done in 3640 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 05:40:15][353372915718775][4402 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-25 05:40:15][353372915718775][4402 ms][WARN] Detected error: Process with pid 2777 either refused to load frida-agent, or terminated during injection [2025-08-25 05:40:15][353372915718775][4402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 05:40:15][353372915718775][4542 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 05:40:15][353372915718775][4542 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 05:40:15][353372915718775][4542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 05:40:15][353372915718775][4667 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 05:40:15][353372915718775][4667 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 05:40:15][353372915718775][4855 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 05:40:17][353372915718775][6869 ms][DEBUG] START check_boot_completed [2025-08-25 05:40:17][353372915718775][6870 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:40:17][353372915718775][6916 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 05:40:17][353372915718775][6916 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:40:17][353372915718775][6963 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 05:40:17][353372915718775][6963 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 05:40:20][353372915718775][9978 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 05:40:20][353372915718775][9978 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915718775\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2421\"}'\'' -e'"" [2025-08-25 05:40:24][353372915718775][13899 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be9a3349-ce5a-46b7-ad81-9a12dacf3a13","id":"QR_be9a3349-ce5a-46b7-ad81-9a12dacf3a13","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:40:25][353372915718775][14055 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-25 05:40:25][353372915718775][14055 ms][DEBUG] END runCmdUntilRes#2 in 4077 ms [2025-08-25 05:40:25][353372915718775][14056 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:40:27][355416333775327][0 ms][INFO] === Request start === [2025-08-25 05:40:27][355416333775327][1 ms][DEBUG] START check_scloud [2025-08-25 05:40:27][355416333775327][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:40:27][355416333775327][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 4503 14427 23676888 124560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:40:27][355416333775327][265 ms][DEBUG] targetPkg: running [2025-08-25 05:40:27][355416333775327][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-25 05:40:27][355416333775327][265 ms][DEBUG] START check_boot_completed [2025-08-25 05:40:27][355416333775327][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:40:27][355416333775327][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 05:40:27][355416333775327][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:40:27][355416333775327][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 05:40:27][355416333775327][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 05:40:27][355416333775327][358 ms][DEBUG] START check_internet [2025-08-25 05:40:27][355416333775327][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 05:40:28][355416333775327][624 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=168 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 168.122/168.122/168.122/0.000 ms\n [2025-08-25 05:40:28][355416333775327][624 ms][DEBUG] check_internet: online [2025-08-25 05:40:28][355416333775327][624 ms][DEBUG] END check_internet in 266 ms [2025-08-25 05:40:28][355416333775327][624 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:40:28][355416333775327][624 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416333775327\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7297\"}'\'' -e'"" [2025-08-25 05:40:28][355416333775327][624 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:40:28][355416333775327][625 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416333775327\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7297\"}'\'' -e'"" [2025-08-25 05:40:31][355416333775327][4154 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60327f14-d54c-4cb8-8b40-2485ee07b036","id":"QR_60327f14-d54c-4cb8-8b40-2485ee07b036","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:40:31][355416333775327][4311 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-08-25 05:40:31][355416333775327][4311 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-25 05:40:31][355416333775327][4311 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:40:34][350013906581490][0 ms][INFO] === Request start === [2025-08-25 05:40:34][350013906581490][1 ms][DEBUG] START check_scloud [2025-08-25 05:40:34][350013906581490][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:40:34][350013906581490][239 ms][DEBUG] SU: done in 238 ms; outu0_a118 4503 14427 23830896 137772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:40:34][350013906581490][239 ms][DEBUG] targetPkg: running [2025-08-25 05:40:34][350013906581490][239 ms][DEBUG] END check_scloud in 238 ms [2025-08-25 05:40:34][350013906581490][239 ms][DEBUG] START check_boot_completed [2025-08-25 05:40:34][350013906581490][239 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:40:34][350013906581490][270 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 05:40:34][350013906581490][270 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:40:34][350013906581490][317 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 05:40:34][350013906581490][317 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 05:40:34][350013906581490][317 ms][DEBUG] START check_internet [2025-08-25 05:40:34][350013906581490][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 05:40:34][350013906581490][661 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.236/250.236/250.236/0.000 ms\n [2025-08-25 05:40:34][350013906581490][661 ms][DEBUG] check_internet: online [2025-08-25 05:40:34][350013906581490][661 ms][DEBUG] END check_internet in 344 ms [2025-08-25 05:40:34][350013906581490][661 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:40:34][350013906581490][661 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013906581490\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6251\"}'\'' -e'"" [2025-08-25 05:40:34][350013906581490][661 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:40:34][350013906581490][661 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013906581490\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6251\"}'\'' -e'"" [2025-08-25 05:40:38][350013906581490][4457 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45469cf0-6c0c-4fbb-b924-11c3bb3235e5","id":"QR_45469cf0-6c0c-4fbb-b924-11c3bb3235e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:40:38][350013906581490][4613 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-25 05:40:38][350013906581490][4613 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-25 05:40:38][350013906581490][4613 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 05:54:03][350673971705488][1 ms][INFO] === Request start === [2025-08-25 05:54:03][350673971705488][1 ms][DEBUG] START check_scloud [2025-08-25 05:54:03][350673971705488][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 05:54:04][350673971705488][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 4503 14427 23891068 150600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 05:54:04][350673971705488][306 ms][DEBUG] targetPkg: running [2025-08-25 05:54:04][350673971705488][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 05:54:04][350673971705488][306 ms][DEBUG] START check_boot_completed [2025-08-25 05:54:04][350673971705488][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 05:54:04][350673971705488][351 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 05:54:04][350673971705488][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 05:54:04][350673971705488][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 05:54:04][350673971705488][398 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 05:54:04][350673971705488][398 ms][DEBUG] START check_internet [2025-08-25 05:54:04][350673971705488][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 05:54:04][350673971705488][883 ms][DEBUG] SU: done in 485 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.303/200.303/200.303/0.000 ms\n [2025-08-25 05:54:04][350673971705488][883 ms][DEBUG] check_internet: online [2025-08-25 05:54:04][350673971705488][883 ms][DEBUG] END check_internet in 485 ms [2025-08-25 05:54:04][350673971705488][883 ms][DEBUG] rawBody.length=1148 [2025-08-25 05:54:04][350673971705488][883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350673971705488\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4248\"}'\'' -e'"" [2025-08-25 05:54:04][350673971705488][883 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 05:54:04][350673971705488][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350673971705488\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4248\"}'\'' -e'"" [2025-08-25 05:54:09][350673971705488][5740 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd41ff14-35a9-4eab-9d01-a921a64ca71a","id":"QR_bd41ff14-35a9-4eab-9d01-a921a64ca71a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 05:54:09][350673971705488][5896 ms][DEBUG] proc_open done in 5013 ms; code=255; res.len=3343 [2025-08-25 05:54:09][350673971705488][5896 ms][DEBUG] END runCmdUntilRes#1 in 5013 ms [2025-08-25 05:54:09][350673971705488][5896 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:02:03][350471121109762][1 ms][INFO] === Request start === [2025-08-25 06:02:03][350471121109762][1 ms][DEBUG] START check_scloud [2025-08-25 06:02:03][350471121109762][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:02:03][350471121109762][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 4503 14427 24046752 162384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:02:03][350471121109762][312 ms][DEBUG] targetPkg: running [2025-08-25 06:02:03][350471121109762][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 06:02:03][350471121109762][312 ms][DEBUG] START check_boot_completed [2025-08-25 06:02:03][350471121109762][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:02:03][350471121109762][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 06:02:03][350471121109762][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:02:03][350471121109762][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 06:02:03][350471121109762][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 06:02:03][350471121109762][391 ms][DEBUG] START check_internet [2025-08-25 06:02:03][350471121109762][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 06:02:03][350471121109762][922 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.321/202.321/202.321/0.000 ms\n [2025-08-25 06:02:03][350471121109762][922 ms][DEBUG] check_internet: online [2025-08-25 06:02:03][350471121109762][922 ms][DEBUG] END check_internet in 531 ms [2025-08-25 06:02:03][350471121109762][922 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:02:03][350471121109762][922 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471121109762\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1932\"}'\'' -e'"" [2025-08-25 06:02:03][350471121109762][922 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:02:03][350471121109762][922 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471121109762\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1932\"}'\'' -e'"" [2025-08-25 06:02:08][350471121109762][5248 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8f842c8-ad47-4fac-b924-aea1491ca01e","id":"QR_f8f842c8-ad47-4fac-b924-aea1491ca01e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:02:08][350471121109762][5405 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-25 06:02:08][350471121109762][5405 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-25 06:02:08][350471121109762][5405 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:03:03][350013881984099][0 ms][INFO] === Request start === [2025-08-25 06:03:03][350013881984099][1 ms][DEBUG] START check_scloud [2025-08-25 06:03:03][350013881984099][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:03:03][350013881984099][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 4503 14427 24200656 170600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:03:03][350013881984099][308 ms][DEBUG] targetPkg: running [2025-08-25 06:03:03][350013881984099][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 06:03:03][350013881984099][308 ms][DEBUG] START check_boot_completed [2025-08-25 06:03:03][350013881984099][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:03:03][350013881984099][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 06:03:03][350013881984099][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:03:03][350013881984099][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 06:03:03][350013881984099][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 06:03:03][350013881984099][402 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:03:03][350013881984099][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881984099\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3447\"}'\'' -e'"" [2025-08-25 06:03:03][350013881984099][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:03:03][350013881984099][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881984099\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3447\"}'\'' -e'"" [2025-08-25 06:03:07][350013881984099][4120 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_640c465a-8f3f-41cd-b51b-db82e0ca1911","id":"QR_640c465a-8f3f-41cd-b51b-db82e0ca1911","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:03:07][350013881984099][4276 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-25 06:03:07][350013881984099][4276 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-25 06:03:07][350013881984099][4276 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:07:03][357042147525829][1 ms][INFO] === Request start === [2025-08-25 06:07:03][357042147525829][1 ms][DEBUG] START check_scloud [2025-08-25 06:07:03][357042147525829][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:07:04][357042147525829][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 4503 14427 24338868 174364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:07:04][357042147525829][267 ms][DEBUG] targetPkg: running [2025-08-25 06:07:04][357042147525829][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-25 06:07:04][357042147525829][267 ms][DEBUG] START check_boot_completed [2025-08-25 06:07:04][357042147525829][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:07:04][357042147525829][298 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 06:07:04][357042147525829][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:07:04][357042147525829][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 06:07:04][357042147525829][345 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 06:07:04][357042147525829][345 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:07:04][357042147525829][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042147525829\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4104\"}'\'' -e'"" [2025-08-25 06:07:04][357042147525829][346 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:07:04][357042147525829][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042147525829\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4104\"}'\'' -e'"" [2025-08-25 06:07:08][357042147525829][4375 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_156d8d3b-a43a-4128-ab8e-1ca211d309e1","id":"QR_156d8d3b-a43a-4128-ab8e-1ca211d309e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:07:08][357042147525829][4532 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 06:07:08][357042147525829][4532 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 06:07:08][357042147525829][4532 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:13:03][351123960533151][1 ms][INFO] === Request start === [2025-08-25 06:13:03][351123960533151][1 ms][DEBUG] START check_scloud [2025-08-25 06:13:03][351123960533151][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:13:03][351123960533151][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 4503 14427 24466904 168352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:13:03][351123960533151][277 ms][DEBUG] targetPkg: running [2025-08-25 06:13:03][351123960533151][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-25 06:13:03][351123960533151][277 ms][DEBUG] START check_boot_completed [2025-08-25 06:13:03][351123960533151][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:13:03][351123960533151][308 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 06:13:03][351123960533151][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:13:03][351123960533151][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 06:13:03][351123960533151][355 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 06:13:03][351123960533151][355 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:13:03][351123960533151][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123960533151\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3837\"}'\'' -e'"" [2025-08-25 06:13:03][351123960533151][355 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:13:03][351123960533151][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123960533151\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3837\"}'\'' -e'"" [2025-08-25 06:13:07][351123960533151][4463 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59a8428e-0e77-48e4-bb43-efcbb74a1a98","id":"QR_59a8428e-0e77-48e4-bb43-efcbb74a1a98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:13:07][351123960533151][4620 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 06:13:07][351123960533151][4620 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-08-25 06:13:07][351123960533151][4620 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:18:03][351771924459036][1 ms][INFO] === Request start === [2025-08-25 06:18:03][351771924459036][1 ms][DEBUG] START check_scloud [2025-08-25 06:18:03][351771924459036][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:18:03][351771924459036][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 4503 14427 24592444 179100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:18:03][351771924459036][302 ms][DEBUG] targetPkg: running [2025-08-25 06:18:03][351771924459036][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 06:18:03][351771924459036][303 ms][DEBUG] START check_boot_completed [2025-08-25 06:18:03][351771924459036][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:18:03][351771924459036][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 06:18:03][351771924459036][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:18:03][351771924459036][443 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 06:18:03][351771924459036][443 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 06:18:03][351771924459036][443 ms][DEBUG] START check_internet [2025-08-25 06:18:03][351771924459036][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 06:18:03][351771924459036][927 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.848/201.848/201.848/0.000 ms\n [2025-08-25 06:18:03][351771924459036][927 ms][DEBUG] check_internet: online [2025-08-25 06:18:03][351771924459036][927 ms][DEBUG] END check_internet in 484 ms [2025-08-25 06:18:03][351771924459036][927 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:18:03][351771924459036][927 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771924459036\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8425\"}'\'' -e'"" [2025-08-25 06:18:03][351771924459036][927 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:18:03][351771924459036][927 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771924459036\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8425\"}'\'' -e'"" [2025-08-25 06:18:08][351771924459036][5160 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40fa6c39-0437-472e-b961-cbf9a8207a72","id":"QR_40fa6c39-0437-472e-b961-cbf9a8207a72","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:18:08][351771924459036][5316 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-25 06:18:08][351771924459036][5316 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-25 06:18:08][351771924459036][5317 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:23:03][352659534717092][1 ms][INFO] === Request start === [2025-08-25 06:23:03][352659534717092][1 ms][DEBUG] START check_scloud [2025-08-25 06:23:03][352659534717092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:23:03][352659534717092][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 4503 14427 24706336 191144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:23:03][352659534717092][280 ms][DEBUG] targetPkg: running [2025-08-25 06:23:03][352659534717092][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-25 06:23:03][352659534717092][280 ms][DEBUG] START check_boot_completed [2025-08-25 06:23:03][352659534717092][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:23:03][352659534717092][311 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 06:23:03][352659534717092][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:23:03][352659534717092][373 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 06:23:03][352659534717092][373 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 06:23:03][352659534717092][373 ms][DEBUG] rawBody.length=1149 [2025-08-25 06:23:03][352659534717092][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352659534717092\",\"model\":\"SM-S926W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7741\"}'\'' -e'"" [2025-08-25 06:23:03][352659534717092][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:23:03][352659534717092][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352659534717092\",\"model\":\"SM-S926W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7741\"}'\'' -e'"" [2025-08-25 06:23:09][352659534717092][6216 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_75a150f3-3f5d-4965-ab20-9e6072386e59","id":"QR_75a150f3-3f5d-4965-ab20-9e6072386e59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:23:09][352659534717092][6372 ms][DEBUG] proc_open done in 5999 ms; code=255; res.len=3343 [2025-08-25 06:23:09][352659534717092][6372 ms][DEBUG] END runCmdUntilRes#1 in 5999 ms [2025-08-25 06:23:09][352659534717092][6372 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:23:13][350356671899518][0 ms][INFO] === Request start === [2025-08-25 06:23:13][350356671899518][1 ms][DEBUG] START check_scloud [2025-08-25 06:23:13][350356671899518][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:23:13][350356671899518][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 4503 14427 24871464 202116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:23:13][350356671899518][286 ms][DEBUG] targetPkg: running [2025-08-25 06:23:13][350356671899518][286 ms][DEBUG] END check_scloud in 286 ms [2025-08-25 06:23:13][350356671899518][286 ms][DEBUG] START check_boot_completed [2025-08-25 06:23:13][350356671899518][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:23:13][350356671899518][333 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 06:23:13][350356671899518][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:23:13][350356671899518][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 06:23:13][350356671899518][380 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 06:23:13][350356671899518][380 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:23:13][350356671899518][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356671899518\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2662\"}'\'' -e'"" [2025-08-25 06:23:13][350356671899518][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:23:13][350356671899518][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356671899518\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2662\"}'\'' -e'"" [2025-08-25 06:23:17][350356671899518][4394 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5cf2fa72-ae6c-4c97-b029-042f1ef2ddf3","id":"QR_5cf2fa72-ae6c-4c97-b029-042f1ef2ddf3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:23:18][350356671899518][4551 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-25 06:23:18][350356671899518][4551 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-25 06:23:18][350356671899518][4551 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:23:21][351676561202963][0 ms][INFO] === Request start === [2025-08-25 06:23:21][351676561202963][1 ms][DEBUG] START check_scloud [2025-08-25 06:23:21][351676561202963][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:23:21][351676561202963][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 4503 14427 24993264 213720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:23:21][351676561202963][294 ms][DEBUG] targetPkg: running [2025-08-25 06:23:21][351676561202963][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-25 06:23:21][351676561202963][294 ms][DEBUG] START check_boot_completed [2025-08-25 06:23:21][351676561202963][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:23:21][351676561202963][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 06:23:21][351676561202963][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:23:21][351676561202963][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 06:23:21][351676561202963][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 06:23:21][351676561202963][387 ms][DEBUG] rawBody.length=1149 [2025-08-25 06:23:21][351676561202963][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676561202963\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7960\"}'\'' -e'"" [2025-08-25 06:23:21][351676561202963][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:23:21][351676561202963][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676561202963\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7960\"}'\'' -e'"" [2025-08-25 06:23:25][351676561202963][4105 ms][DEBUG] proc_open done in 3718 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 06:23:25][351676561202963][4106 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-08-25 06:23:25][351676561202963][4106 ms][WARN] Detected error: Process with pid 4503 either refused to load frida-agent, or terminated during injection [2025-08-25 06:23:25][351676561202963][4106 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 06:23:25][351676561202963][4246 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 06:23:25][351676561202963][4246 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 06:23:25][351676561202963][4246 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 06:23:25][351676561202963][4373 ms][DEBUG] SU: done in 126 ms; out [2025-08-25 06:23:25][351676561202963][4373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 06:23:25][351676561202963][4543 ms][DEBUG] SU: done in 170 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 06:23:27][351676561202963][6558 ms][DEBUG] START check_boot_completed [2025-08-25 06:23:27][351676561202963][6558 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:23:27][351676561202963][6605 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 06:23:27][351676561202963][6605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:23:27][351676561202963][6652 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 06:23:27][351676561202963][6652 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 06:23:30][351676561202963][9666 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 06:23:30][351676561202963][9666 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676561202963\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7960\"}'\'' -e'"" [2025-08-25 06:23:35][351676561202963][14650 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_663b21a2-792e-4cb4-8609-a3db57d5d6cc","id":"QR_663b21a2-792e-4cb4-8609-a3db57d5d6cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:23:35][351676561202963][14806 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-08-25 06:23:35][351676561202963][14806 ms][DEBUG] END runCmdUntilRes#2 in 5140 ms [2025-08-25 06:23:35][351676561202963][14806 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:24:03][355824555013626][0 ms][INFO] === Request start === [2025-08-25 06:24:03][355824555013626][1 ms][DEBUG] START check_scloud [2025-08-25 06:24:03][355824555013626][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:24:04][355824555013626][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 7697 14427 23561008 127336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:24:04][355824555013626][300 ms][DEBUG] targetPkg: running [2025-08-25 06:24:04][355824555013626][300 ms][DEBUG] END check_scloud in 300 ms [2025-08-25 06:24:04][355824555013626][300 ms][DEBUG] START check_boot_completed [2025-08-25 06:24:04][355824555013626][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:24:04][355824555013626][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 06:24:04][355824555013626][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:24:04][355824555013626][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 06:24:04][355824555013626][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 06:24:04][355824555013626][409 ms][DEBUG] START check_internet [2025-08-25 06:24:04][355824555013626][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 06:24:04][355824555013626][941 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.853/198.853/198.853/0.000 ms\n [2025-08-25 06:24:04][355824555013626][941 ms][DEBUG] check_internet: online [2025-08-25 06:24:04][355824555013626][941 ms][DEBUG] END check_internet in 531 ms [2025-08-25 06:24:04][355824555013626][941 ms][DEBUG] rawBody.length=1149 [2025-08-25 06:24:04][355824555013626][941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824555013626\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5108\"}'\'' -e'"" [2025-08-25 06:24:04][355824555013626][941 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:24:04][355824555013626][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824555013626\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5108\"}'\'' -e'"" [2025-08-25 06:24:10][355824555013626][6392 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b029ddac-d817-4088-8cc3-39d592487e4d","id":"QR_b029ddac-d817-4088-8cc3-39d592487e4d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:24:10][355824555013626][6548 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-08-25 06:24:10][355824555013626][6548 ms][DEBUG] END runCmdUntilRes#1 in 5607 ms [2025-08-25 06:24:10][355824555013626][6548 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:24:16][350448241270518][0 ms][INFO] === Request start === [2025-08-25 06:24:16][350448241270518][1 ms][DEBUG] START check_scloud [2025-08-25 06:24:16][350448241270518][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:24:16][350448241270518][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 7697 14427 23757716 137948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:24:16][350448241270518][261 ms][DEBUG] targetPkg: running [2025-08-25 06:24:16][350448241270518][261 ms][DEBUG] END check_scloud in 261 ms [2025-08-25 06:24:16][350448241270518][261 ms][DEBUG] START check_boot_completed [2025-08-25 06:24:16][350448241270518][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:24:16][350448241270518][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 06:24:16][350448241270518][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:24:16][350448241270518][370 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 06:24:16][350448241270518][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 06:24:16][350448241270518][370 ms][DEBUG] START check_internet [2025-08-25 06:24:16][350448241270518][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 06:24:16][350448241270518][745 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=263 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 263.797/263.797/263.797/0.000 ms\n [2025-08-25 06:24:16][350448241270518][745 ms][DEBUG] check_internet: online [2025-08-25 06:24:16][350448241270518][745 ms][DEBUG] END check_internet in 375 ms [2025-08-25 06:24:16][350448241270518][746 ms][DEBUG] rawBody.length=1149 [2025-08-25 06:24:16][350448241270518][746 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350448241270518\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1748\"}'\'' -e'"" [2025-08-25 06:24:16][350448241270518][746 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:24:16][350448241270518][746 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350448241270518\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1748\"}'\'' -e'"" [2025-08-25 06:24:21][350448241270518][5385 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0dc5df6-daab-45e1-99a1-07ec1f926693","id":"QR_f0dc5df6-daab-45e1-99a1-07ec1f926693","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:24:21][350448241270518][5541 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-25 06:24:21][350448241270518][5541 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-25 06:24:21][350448241270518][5541 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:35:03][355859832213714][1 ms][INFO] === Request start === [2025-08-25 06:35:03][355859832213714][1 ms][DEBUG] START check_scloud [2025-08-25 06:35:03][355859832213714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:35:03][355859832213714][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 7697 14427 23871228 149952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:35:03][355859832213714][303 ms][DEBUG] targetPkg: running [2025-08-25 06:35:03][355859832213714][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 06:35:03][355859832213714][303 ms][DEBUG] START check_boot_completed [2025-08-25 06:35:03][355859832213714][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:35:03][355859832213714][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 06:35:03][355859832213714][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:35:03][355859832213714][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 06:35:03][355859832213714][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 06:35:03][355859832213714][381 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:35:03][355859832213714][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859832213714\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6193\"}'\'' -e'"" [2025-08-25 06:35:03][355859832213714][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:35:03][355859832213714][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859832213714\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6193\"}'\'' -e'"" [2025-08-25 06:35:07][355859832213714][4536 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f2ec29e-35cd-4fdd-9891-da017198ce07","id":"QR_6f2ec29e-35cd-4fdd-9891-da017198ce07","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:35:07][355859832213714][4692 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 06:35:07][355859832213714][4692 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 06:35:07][355859832213714][4693 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:38:03][355001767347437][1 ms][INFO] === Request start === [2025-08-25 06:38:03][355001767347437][1 ms][DEBUG] START check_scloud [2025-08-25 06:38:03][355001767347437][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:38:03][355001767347437][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 7697 14427 24048484 160716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:38:03][355001767347437][314 ms][DEBUG] targetPkg: running [2025-08-25 06:38:03][355001767347437][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 06:38:03][355001767347437][314 ms][DEBUG] START check_boot_completed [2025-08-25 06:38:03][355001767347437][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:38:03][355001767347437][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 06:38:03][355001767347437][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:38:03][355001767347437][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 06:38:03][355001767347437][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 06:38:03][355001767347437][393 ms][DEBUG] START check_internet [2025-08-25 06:38:03][355001767347437][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 06:38:04][355001767347437][845 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.389/201.389/201.389/0.000 ms\n [2025-08-25 06:38:04][355001767347437][845 ms][DEBUG] check_internet: online [2025-08-25 06:38:04][355001767347437][846 ms][DEBUG] END check_internet in 453 ms [2025-08-25 06:38:04][355001767347437][846 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:38:04][355001767347437][846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001767347437\",\"model\":\"SM-F711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7945\"}'\'' -e'"" [2025-08-25 06:38:04][355001767347437][846 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:38:04][355001767347437][846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001767347437\",\"model\":\"SM-F711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7945\"}'\'' -e'"" [2025-08-25 06:38:08][355001767347437][4891 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e444ba61-b01a-4b78-9582-77da0301f5bb","id":"QR_e444ba61-b01a-4b78-9582-77da0301f5bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:38:08][355001767347437][5047 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-25 06:38:08][355001767347437][5047 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 06:38:08][355001767347437][5047 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:42:03][358212584124456][1 ms][INFO] === Request start === [2025-08-25 06:42:03][358212584124456][1 ms][DEBUG] START check_scloud [2025-08-25 06:42:03][358212584124456][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:42:03][358212584124456][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 7697 14427 24152072 171736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:42:03][358212584124456][303 ms][DEBUG] targetPkg: running [2025-08-25 06:42:03][358212584124456][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 06:42:03][358212584124456][303 ms][DEBUG] START check_boot_completed [2025-08-25 06:42:03][358212584124456][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:42:04][358212584124456][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 06:42:04][358212584124456][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:42:04][358212584124456][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 06:42:04][358212584124456][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 06:42:04][358212584124456][397 ms][DEBUG] START check_internet [2025-08-25 06:42:04][358212584124456][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 06:42:04][358212584124456][881 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=373 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 373.821/373.821/373.821/0.000 ms\n [2025-08-25 06:42:04][358212584124456][881 ms][DEBUG] check_internet: online [2025-08-25 06:42:04][358212584124456][881 ms][DEBUG] END check_internet in 484 ms [2025-08-25 06:42:04][358212584124456][881 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:42:04][358212584124456][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212584124456\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3091\"}'\'' -e'"" [2025-08-25 06:42:04][358212584124456][881 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:42:04][358212584124456][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212584124456\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3091\"}'\'' -e'"" [2025-08-25 06:42:08][358212584124456][4880 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_068eb0d8-7669-4d9e-86c9-fe0074f1d93c","id":"QR_068eb0d8-7669-4d9e-86c9-fe0074f1d93c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:42:08][358212584124456][5036 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-25 06:42:08][358212584124456][5036 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-25 06:42:08][358212584124456][5036 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:42:11][352469853737493][1 ms][INFO] === Request start === [2025-08-25 06:42:11][352469853737493][1 ms][DEBUG] START check_scloud [2025-08-25 06:42:11][352469853737493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:42:11][352469853737493][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 7697 14427 24288464 183564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:42:11][352469853737493][290 ms][DEBUG] targetPkg: running [2025-08-25 06:42:11][352469853737493][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-25 06:42:11][352469853737493][290 ms][DEBUG] START check_boot_completed [2025-08-25 06:42:11][352469853737493][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:42:11][352469853737493][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 06:42:11][352469853737493][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:42:11][352469853737493][398 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 06:42:11][352469853737493][398 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 06:42:11][352469853737493][398 ms][DEBUG] START check_internet [2025-08-25 06:42:11][352469853737493][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 06:42:11][352469853737493][695 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.839/138.839/138.839/0.000 ms\n [2025-08-25 06:42:11][352469853737493][695 ms][DEBUG] check_internet: online [2025-08-25 06:42:11][352469853737493][695 ms][DEBUG] END check_internet in 297 ms [2025-08-25 06:42:11][352469853737493][695 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:42:11][352469853737493][696 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853737493\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1160\"}'\'' -e'"" [2025-08-25 06:42:11][352469853737493][696 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:42:11][352469853737493][696 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853737493\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1160\"}'\'' -e'"" [2025-08-25 06:42:15][352469853737493][4741 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8689e54-b099-467f-a160-20c58f57ce76","id":"QR_c8689e54-b099-467f-a160-20c58f57ce76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:42:15][352469853737493][4897 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-25 06:42:15][352469853737493][4897 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-25 06:42:15][352469853737493][4897 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:42:18][358385390557539][0 ms][INFO] === Request start === [2025-08-25 06:42:18][358385390557539][1 ms][DEBUG] START check_scloud [2025-08-25 06:42:18][358385390557539][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:42:18][358385390557539][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 7697 14427 24432472 194348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:42:18][358385390557539][302 ms][DEBUG] targetPkg: running [2025-08-25 06:42:18][358385390557539][302 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 06:42:18][358385390557539][302 ms][DEBUG] START check_boot_completed [2025-08-25 06:42:18][358385390557539][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:42:18][358385390557539][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 06:42:18][358385390557539][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:42:18][358385390557539][442 ms][DEBUG] SU: done in 93 ms; out [2025-08-25 06:42:18][358385390557539][442 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 06:42:18][358385390557539][442 ms][DEBUG] START check_internet [2025-08-25 06:42:18][358385390557539][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 06:42:19][358385390557539][739 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.012/196.012/196.012/0.000 ms\n [2025-08-25 06:42:19][358385390557539][739 ms][DEBUG] check_internet: online [2025-08-25 06:42:19][358385390557539][740 ms][DEBUG] END check_internet in 297 ms [2025-08-25 06:42:19][358385390557539][740 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:42:19][358385390557539][740 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390557539\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3054\"}'\'' -e'"" [2025-08-25 06:42:19][358385390557539][740 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:42:19][358385390557539][740 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390557539\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3054\"}'\'' -e'"" [2025-08-25 06:42:22][358385390557539][4160 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b2ff9ac-8915-4bd7-8daa-960d655f4197","id":"QR_6b2ff9ac-8915-4bd7-8daa-960d655f4197","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:42:22][358385390557539][4316 ms][DEBUG] proc_open done in 3576 ms; code=255; res.len=3343 [2025-08-25 06:42:22][358385390557539][4317 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-25 06:42:22][358385390557539][4317 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:46:03][352469855805660][1 ms][INFO] === Request start === [2025-08-25 06:46:03][352469855805660][1 ms][DEBUG] START check_scloud [2025-08-25 06:46:03][352469855805660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:46:03][352469855805660][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 7697 14427 24513332 206428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:46:03][352469855805660][257 ms][DEBUG] targetPkg: running [2025-08-25 06:46:03][352469855805660][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-25 06:46:03][352469855805660][257 ms][DEBUG] START check_boot_completed [2025-08-25 06:46:03][352469855805660][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:46:03][352469855805660][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 06:46:03][352469855805660][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:46:03][352469855805660][366 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 06:46:03][352469855805660][366 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 06:46:03][352469855805660][367 ms][DEBUG] START check_internet [2025-08-25 06:46:03][352469855805660][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 06:46:04][352469855805660][852 ms][DEBUG] SU: done in 486 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.625/202.625/202.625/0.000 ms\n [2025-08-25 06:46:04][352469855805660][852 ms][DEBUG] check_internet: online [2025-08-25 06:46:04][352469855805660][852 ms][DEBUG] END check_internet in 486 ms [2025-08-25 06:46:04][352469855805660][853 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:46:04][352469855805660][853 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469855805660\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4589\"}'\'' -e'"" [2025-08-25 06:46:04][352469855805660][853 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:46:04][352469855805660][853 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469855805660\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4589\"}'\'' -e'"" [2025-08-25 06:46:08][352469855805660][4740 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11204d42-3310-4aa0-ac14-4bd469ede236","id":"QR_11204d42-3310-4aa0-ac14-4bd469ede236","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:46:08][352469855805660][4896 ms][DEBUG] proc_open done in 4044 ms; code=255; res.len=3343 [2025-08-25 06:46:08][352469855805660][4896 ms][DEBUG] END runCmdUntilRes#1 in 4044 ms [2025-08-25 06:46:08][352469855805660][4896 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:56:03][352923545159862][1 ms][INFO] === Request start === [2025-08-25 06:56:03][352923545159862][1 ms][DEBUG] START check_scloud [2025-08-25 06:56:03][352923545159862][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:56:03][352923545159862][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 7697 14427 24640332 214280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:56:03][352923545159862][330 ms][DEBUG] targetPkg: running [2025-08-25 06:56:03][352923545159862][330 ms][DEBUG] END check_scloud in 329 ms [2025-08-25 06:56:03][352923545159862][330 ms][DEBUG] START check_boot_completed [2025-08-25 06:56:03][352923545159862][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:56:03][352923545159862][377 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 06:56:03][352923545159862][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:56:03][352923545159862][440 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 06:56:03][352923545159862][440 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 06:56:03][352923545159862][440 ms][DEBUG] START check_internet [2025-08-25 06:56:03][352923545159862][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 06:56:04][352923545159862][955 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.602/201.602/201.602/0.000 ms\n [2025-08-25 06:56:04][352923545159862][955 ms][DEBUG] check_internet: online [2025-08-25 06:56:04][352923545159862][955 ms][DEBUG] END check_internet in 516 ms [2025-08-25 06:56:04][352923545159862][955 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:56:04][352923545159862][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923545159862\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5041\"}'\'' -e'"" [2025-08-25 06:56:04][352923545159862][955 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:56:04][352923545159862][956 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923545159862\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5041\"}'\'' -e'"" [2025-08-25 06:56:08][352923545159862][5329 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f8b47b8-4d9e-432e-be29-ec0d1259b166","id":"QR_5f8b47b8-4d9e-432e-be29-ec0d1259b166","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:56:08][352923545159862][5485 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-08-25 06:56:08][352923545159862][5485 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-25 06:56:08][352923545159862][5485 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:58:03][351273093823753][0 ms][INFO] === Request start === [2025-08-25 06:58:03][351273093823753][1 ms][DEBUG] START check_scloud [2025-08-25 06:58:03][351273093823753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:58:03][351273093823753][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 7697 14427 24808576 187340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:58:03][351273093823753][303 ms][DEBUG] targetPkg: running [2025-08-25 06:58:03][351273093823753][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 06:58:03][351273093823753][303 ms][DEBUG] START check_boot_completed [2025-08-25 06:58:03][351273093823753][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:58:03][351273093823753][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 06:58:03][351273093823753][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:58:03][351273093823753][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 06:58:03][351273093823753][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 06:58:03][351273093823753][396 ms][DEBUG] START check_internet [2025-08-25 06:58:03][351273093823753][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 06:58:04][351273093823753][896 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.375/202.375/202.375/0.000 ms\n [2025-08-25 06:58:04][351273093823753][896 ms][DEBUG] check_internet: online [2025-08-25 06:58:04][351273093823753][896 ms][DEBUG] END check_internet in 500 ms [2025-08-25 06:58:04][351273093823753][896 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:58:04][351273093823753][896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351273093823753\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4774\"}'\'' -e'"" [2025-08-25 06:58:04][351273093823753][896 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:58:04][351273093823753][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351273093823753\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4774\"}'\'' -e'"" [2025-08-25 06:58:08][351273093823753][5004 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5637ebd8-d98c-4370-a090-7453fa48a2a1","id":"QR_5637ebd8-d98c-4370-a090-7453fa48a2a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:58:08][351273093823753][5161 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 06:58:08][351273093823753][5161 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 06:58:08][351273093823753][5161 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 06:59:02][350226695009495][1 ms][INFO] === Request start === [2025-08-25 06:59:02][350226695009495][1 ms][DEBUG] START check_scloud [2025-08-25 06:59:02][350226695009495][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 06:59:03][350226695009495][262 ms][DEBUG] SU: done in 260 ms; outu0_a118 7697 14427 24947044 183104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 06:59:03][350226695009495][262 ms][DEBUG] targetPkg: running [2025-08-25 06:59:03][350226695009495][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-25 06:59:03][350226695009495][262 ms][DEBUG] START check_boot_completed [2025-08-25 06:59:03][350226695009495][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:59:03][350226695009495][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 06:59:03][350226695009495][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:59:03][350226695009495][357 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 06:59:03][350226695009495][357 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 06:59:03][350226695009495][357 ms][DEBUG] rawBody.length=1148 [2025-08-25 06:59:03][350226695009495][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695009495\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9562\"}'\'' -e'"" [2025-08-25 06:59:03][350226695009495][357 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 06:59:03][350226695009495][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695009495\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9562\"}'\'' -e'"" [2025-08-25 06:59:07][350226695009495][4230 ms][DEBUG] proc_open done in 3872 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 06:59:07][350226695009495][4230 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-08-25 06:59:07][350226695009495][4230 ms][WARN] Detected error: Process with pid 7697 either refused to load frida-agent, or terminated during injection [2025-08-25 06:59:07][350226695009495][4230 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 06:59:07][350226695009495][4386 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 06:59:07][350226695009495][4386 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 06:59:07][350226695009495][4386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 06:59:07][350226695009495][4511 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 06:59:07][350226695009495][4511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 06:59:07][350226695009495][4698 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 06:59:09][350226695009495][6713 ms][DEBUG] START check_boot_completed [2025-08-25 06:59:09][350226695009495][6713 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 06:59:09][350226695009495][6760 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 06:59:09][350226695009495][6760 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 06:59:09][350226695009495][6807 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 06:59:09][350226695009495][6807 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 06:59:12][350226695009495][9822 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 06:59:12][350226695009495][9822 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695009495\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9562\"}'\'' -e'"" [2025-08-25 06:59:16][350226695009495][13836 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b246d1f4-5abb-44f8-9897-bea91a679195","id":"QR_b246d1f4-5abb-44f8-9897-bea91a679195","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 06:59:16][350226695009495][13993 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-25 06:59:16][350226695009495][13993 ms][DEBUG] END runCmdUntilRes#2 in 4171 ms [2025-08-25 06:59:16][350226695009495][13993 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:02:03][357642299479210][1 ms][INFO] === Request start === [2025-08-25 07:02:03][357642299479210][1 ms][DEBUG] START check_scloud [2025-08-25 07:02:03][357642299479210][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:02:03][357642299479210][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 10434 14427 23503552 127084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:02:03][357642299479210][304 ms][DEBUG] targetPkg: running [2025-08-25 07:02:03][357642299479210][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 07:02:03][357642299479210][304 ms][DEBUG] START check_boot_completed [2025-08-25 07:02:03][357642299479210][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:02:03][357642299479210][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 07:02:03][357642299479210][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:02:04][357642299479210][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:02:04][357642299479210][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 07:02:04][357642299479210][383 ms][DEBUG] START check_internet [2025-08-25 07:02:04][357642299479210][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 07:02:04][357642299479210][742 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.215/239.215/239.215/0.000 ms\n [2025-08-25 07:02:04][357642299479210][742 ms][DEBUG] check_internet: online [2025-08-25 07:02:04][357642299479210][742 ms][DEBUG] END check_internet in 359 ms [2025-08-25 07:02:04][357642299479210][742 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:02:04][357642299479210][743 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357642299479210\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8699\"}'\'' -e'"" [2025-08-25 07:02:04][357642299479210][743 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:02:04][357642299479210][743 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357642299479210\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8699\"}'\'' -e'"" [2025-08-25 07:02:08][357642299479210][4835 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_923beb54-adaa-4dd2-bd7d-67c7b18d3c57","id":"QR_923beb54-adaa-4dd2-bd7d-67c7b18d3c57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:02:08][357642299479210][4991 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-25 07:02:08][357642299479210][4991 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-25 07:02:08][357642299479210][4991 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:06:03][352665185677485][1 ms][INFO] === Request start === [2025-08-25 07:06:03][352665185677485][1 ms][DEBUG] START check_scloud [2025-08-25 07:06:03][352665185677485][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:06:03][352665185677485][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 10434 14427 23629560 138088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:06:03][352665185677485][277 ms][DEBUG] targetPkg: running [2025-08-25 07:06:03][352665185677485][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-25 07:06:03][352665185677485][277 ms][DEBUG] START check_boot_completed [2025-08-25 07:06:03][352665185677485][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:06:03][352665185677485][308 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 07:06:03][352665185677485][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:06:03][352665185677485][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:06:03][352665185677485][355 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 07:06:03][352665185677485][355 ms][DEBUG] START check_internet [2025-08-25 07:06:03][352665185677485][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 07:06:03][352665185677485][856 ms][DEBUG] SU: done in 501 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.234/200.234/200.234/0.000 ms\n [2025-08-25 07:06:03][352665185677485][856 ms][DEBUG] check_internet: online [2025-08-25 07:06:03][352665185677485][856 ms][DEBUG] END check_internet in 501 ms [2025-08-25 07:06:03][352665185677485][856 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:06:03][352665185677485][856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665185677485\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3856\"}'\'' -e'"" [2025-08-25 07:06:03][352665185677485][856 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:06:03][352665185677485][856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665185677485\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3856\"}'\'' -e'"" [2025-08-25 07:06:08][352665185677485][5010 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_790c92eb-eb6e-4dcc-bc06-1a898f83d54d","id":"QR_790c92eb-eb6e-4dcc-bc06-1a898f83d54d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:06:08][352665185677485][5166 ms][DEBUG] proc_open done in 4310 ms; code=255; res.len=3343 [2025-08-25 07:06:08][352665185677485][5167 ms][DEBUG] END runCmdUntilRes#1 in 4310 ms [2025-08-25 07:06:08][352665185677485][5167 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:07:02][352132621590715][0 ms][INFO] === Request start === [2025-08-25 07:07:02][352132621590715][1 ms][DEBUG] START check_scloud [2025-08-25 07:07:02][352132621590715][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:07:03][352132621590715][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 10434 14427 23767900 149836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:07:03][352132621590715][311 ms][DEBUG] targetPkg: running [2025-08-25 07:07:03][352132621590715][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 07:07:03][352132621590715][311 ms][DEBUG] START check_boot_completed [2025-08-25 07:07:03][352132621590715][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:07:03][352132621590715][357 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 07:07:03][352132621590715][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:07:03][352132621590715][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:07:03][352132621590715][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 07:07:03][352132621590715][404 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:07:03][352132621590715][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132621590715\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2454\"}'\'' -e'"" [2025-08-25 07:07:03][352132621590715][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:07:03][352132621590715][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132621590715\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2454\"}'\'' -e'"" [2025-08-25 07:07:07][352132621590715][4215 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74a1f66d-81b4-4810-9ac1-91ccbdb6154b","id":"QR_74a1f66d-81b4-4810-9ac1-91ccbdb6154b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:07:07][352132621590715][4371 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-25 07:07:07][352132621590715][4371 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-25 07:07:07][352132621590715][4371 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:08:03][354838351261305][0 ms][INFO] === Request start === [2025-08-25 07:08:03][354838351261305][1 ms][DEBUG] START check_scloud [2025-08-25 07:08:03][354838351261305][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:08:03][354838351261305][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 10434 14427 23912448 160912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:08:03][354838351261305][251 ms][DEBUG] targetPkg: running [2025-08-25 07:08:03][354838351261305][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-25 07:08:03][354838351261305][251 ms][DEBUG] START check_boot_completed [2025-08-25 07:08:03][354838351261305][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:08:03][354838351261305][298 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 07:08:03][354838351261305][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:08:03][354838351261305][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:08:03][354838351261305][345 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 07:08:03][354838351261305][345 ms][DEBUG] START check_internet [2025-08-25 07:08:03][354838351261305][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 07:08:04][354838351261305][907 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.801/202.801/202.801/0.000 ms\n [2025-08-25 07:08:04][354838351261305][907 ms][DEBUG] check_internet: online [2025-08-25 07:08:04][354838351261305][907 ms][DEBUG] END check_internet in 563 ms [2025-08-25 07:08:04][354838351261305][908 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:08:04][354838351261305][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838351261305\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7585\"}'\'' -e'"" [2025-08-25 07:08:04][354838351261305][908 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:08:04][354838351261305][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838351261305\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7585\"}'\'' -e'"" [2025-08-25 07:08:08][354838351261305][4922 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c1b9191a-7f7e-4e7d-8421-e16698168def","id":"QR_c1b9191a-7f7e-4e7d-8421-e16698168def","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:08:08][354838351261305][5078 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-25 07:08:08][354838351261305][5078 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-25 07:08:08][354838351261305][5078 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:09:03][357576783068222][1 ms][INFO] === Request start === [2025-08-25 07:09:03][357576783068222][1 ms][DEBUG] START check_scloud [2025-08-25 07:09:03][357576783068222][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:09:03][357576783068222][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 10434 14427 24061156 170932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:09:03][357576783068222][319 ms][DEBUG] targetPkg: running [2025-08-25 07:09:03][357576783068222][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 07:09:03][357576783068222][319 ms][DEBUG] START check_boot_completed [2025-08-25 07:09:03][357576783068222][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:09:03][357576783068222][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 07:09:03][357576783068222][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:09:03][357576783068222][413 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:09:03][357576783068222][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 07:09:03][357576783068222][413 ms][DEBUG] rawBody.length=1149 [2025-08-25 07:09:03][357576783068222][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576783068222\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3212\"}'\'' -e'"" [2025-08-25 07:09:03][357576783068222][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:09:03][357576783068222][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576783068222\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3212\"}'\'' -e'"" [2025-08-25 07:09:09][357576783068222][6146 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_263c8600-49c6-460c-bfb6-37eac681487b","id":"QR_263c8600-49c6-460c-bfb6-37eac681487b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:09:09][357576783068222][6302 ms][DEBUG] proc_open done in 5888 ms; code=255; res.len=3343 [2025-08-25 07:09:09][357576783068222][6302 ms][DEBUG] END runCmdUntilRes#1 in 5889 ms [2025-08-25 07:09:09][357576783068222][6302 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:11:03][352469857292263][0 ms][INFO] === Request start === [2025-08-25 07:11:03][352469857292263][1 ms][DEBUG] START check_scloud [2025-08-25 07:11:03][352469857292263][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:11:04][352469857292263][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 10434 14427 24212808 183324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:11:04][352469857292263][301 ms][DEBUG] targetPkg: running [2025-08-25 07:11:04][352469857292263][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-25 07:11:04][352469857292263][301 ms][DEBUG] START check_boot_completed [2025-08-25 07:11:04][352469857292263][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:11:04][352469857292263][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 07:11:04][352469857292263][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:11:04][352469857292263][396 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 07:11:04][352469857292263][396 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 07:11:04][352469857292263][396 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:11:04][352469857292263][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469857292263\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1418\"}'\'' -e'"" [2025-08-25 07:11:04][352469857292263][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:11:04][352469857292263][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469857292263\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1418\"}'\'' -e'"" [2025-08-25 07:11:08][352469857292263][4377 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_893ec0c4-fd54-43bd-8c44-a24f949f35b3","id":"QR_893ec0c4-fd54-43bd-8c44-a24f949f35b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:11:08][352469857292263][4533 ms][DEBUG] proc_open done in 4137 ms; code=255; res.len=3343 [2025-08-25 07:11:08][352469857292263][4533 ms][DEBUG] END runCmdUntilRes#1 in 4137 ms [2025-08-25 07:11:08][352469857292263][4534 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:12:03][358385390216771][1 ms][INFO] === Request start === [2025-08-25 07:12:03][358385390216771][1 ms][DEBUG] START check_scloud [2025-08-25 07:12:03][358385390216771][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:12:03][358385390216771][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 10434 14427 24334764 194104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:12:03][358385390216771][294 ms][DEBUG] targetPkg: running [2025-08-25 07:12:03][358385390216771][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-25 07:12:03][358385390216771][295 ms][DEBUG] START check_boot_completed [2025-08-25 07:12:03][358385390216771][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:12:03][358385390216771][341 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:12:03][358385390216771][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:12:03][358385390216771][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:12:03][358385390216771][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 07:12:03][358385390216771][388 ms][DEBUG] START check_internet [2025-08-25 07:12:03][358385390216771][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 07:12:04][358385390216771][700 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.836/207.836/207.836/0.000 ms\n [2025-08-25 07:12:04][358385390216771][700 ms][DEBUG] check_internet: online [2025-08-25 07:12:04][358385390216771][700 ms][DEBUG] END check_internet in 313 ms [2025-08-25 07:12:04][358385390216771][700 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:12:04][358385390216771][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390216771\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6838\"}'\'' -e'"" [2025-08-25 07:12:04][358385390216771][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:12:04][358385390216771][700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390216771\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6838\"}'\'' -e'"" [2025-08-25 07:12:07][358385390216771][4481 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe3a6dbc-71ca-4b2d-961d-9c78b8a977b4","id":"QR_fe3a6dbc-71ca-4b2d-961d-9c78b8a977b4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:12:07][358385390216771][4637 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-25 07:12:07][358385390216771][4637 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-25 07:12:07][358385390216771][4637 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:13:03][350320362789255][0 ms][INFO] === Request start === [2025-08-25 07:13:03][350320362789255][1 ms][DEBUG] START check_scloud [2025-08-25 07:13:03][350320362789255][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:13:03][350320362789255][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 10434 14427 24446032 205928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:13:03][350320362789255][314 ms][DEBUG] targetPkg: running [2025-08-25 07:13:03][350320362789255][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 07:13:03][350320362789255][314 ms][DEBUG] START check_boot_completed [2025-08-25 07:13:03][350320362789255][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:13:03][350320362789255][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:13:03][350320362789255][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:13:03][350320362789255][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:13:03][350320362789255][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 07:13:03][350320362789255][408 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:13:03][350320362789255][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320362789255\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1979\"}'\'' -e'"" [2025-08-25 07:13:03][350320362789255][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:13:03][350320362789255][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320362789255\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1979\"}'\'' -e'"" [2025-08-25 07:13:07][350320362789255][4469 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a2ca7b5-24dd-421d-87e8-f7917d7dbae2","id":"QR_3a2ca7b5-24dd-421d-87e8-f7917d7dbae2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:13:07][350320362789255][4625 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-25 07:13:07][350320362789255][4625 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-25 07:13:07][350320362789255][4625 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:16:03][355088850637774][1 ms][INFO] === Request start === [2025-08-25 07:16:03][355088850637774][1 ms][DEBUG] START check_scloud [2025-08-25 07:16:03][355088850637774][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:16:03][355088850637774][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 10434 14427 24553780 216600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:16:03][355088850637774][248 ms][DEBUG] targetPkg: running [2025-08-25 07:16:03][355088850637774][248 ms][DEBUG] END check_scloud in 247 ms [2025-08-25 07:16:03][355088850637774][248 ms][DEBUG] START check_boot_completed [2025-08-25 07:16:03][355088850637774][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:16:03][355088850637774][279 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 07:16:03][355088850637774][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:16:03][355088850637774][326 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:16:03][355088850637774][326 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 07:16:03][355088850637774][326 ms][DEBUG] START check_internet [2025-08-25 07:16:03][355088850637774][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 07:16:04][355088850637774][858 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.280/203.280/203.280/0.000 ms\n [2025-08-25 07:16:04][355088850637774][858 ms][DEBUG] check_internet: online [2025-08-25 07:16:04][355088850637774][858 ms][DEBUG] END check_internet in 531 ms [2025-08-25 07:16:04][355088850637774][858 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:16:04][355088850637774][858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088850637774\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6678\"}'\'' -e'"" [2025-08-25 07:16:04][355088850637774][858 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:16:04][355088850637774][858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088850637774\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6678\"}'\'' -e'"" [2025-08-25 07:16:08][355088850637774][5075 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91059b05-793f-48f8-bf9e-8443df5baa31","id":"QR_91059b05-793f-48f8-bf9e-8443df5baa31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:16:08][355088850637774][5231 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-25 07:16:08][355088850637774][5231 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-25 07:16:08][355088850637774][5231 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:18:03][351506558793262][1 ms][INFO] === Request start === [2025-08-25 07:18:03][351506558793262][1 ms][DEBUG] START check_scloud [2025-08-25 07:18:03][351506558793262][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:18:03][351506558793262][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 10434 14427 24698264 228688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:18:03][351506558793262][305 ms][DEBUG] targetPkg: running [2025-08-25 07:18:03][351506558793262][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 07:18:03][351506558793262][305 ms][DEBUG] START check_boot_completed [2025-08-25 07:18:03][351506558793262][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:18:03][351506558793262][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 07:18:03][351506558793262][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:18:03][351506558793262][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:18:03][351506558793262][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 07:18:03][351506558793262][399 ms][DEBUG] START check_internet [2025-08-25 07:18:03][351506558793262][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 07:18:03][351506558793262][899 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.683/199.683/199.683/0.000 ms\n [2025-08-25 07:18:03][351506558793262][899 ms][DEBUG] check_internet: online [2025-08-25 07:18:03][351506558793262][899 ms][DEBUG] END check_internet in 500 ms [2025-08-25 07:18:03][351506558793262][899 ms][DEBUG] rawBody.length=1147 [2025-08-25 07:18:03][351506558793262][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351506558793262\",\"model\":\"SM-X115\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3877\"}'\'' -e'"" [2025-08-25 07:18:03][351506558793262][899 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:18:03][351506558793262][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351506558793262\",\"model\":\"SM-X115\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3877\"}'\'' -e'"" [2025-08-25 07:18:09][351506558793262][6553 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c54eb45c-af22-4ba5-8291-01de90012fb9","id":"QR_c54eb45c-af22-4ba5-8291-01de90012fb9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:18:09][351506558793262][6709 ms][DEBUG] proc_open done in 5810 ms; code=255; res.len=3343 [2025-08-25 07:18:09][351506558793262][6710 ms][DEBUG] END runCmdUntilRes#1 in 5810 ms [2025-08-25 07:18:09][351506558793262][6710 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:19:30][353029495460307][0 ms][INFO] === Request start === [2025-08-25 07:19:30][353029495460307][1 ms][DEBUG] START check_scloud [2025-08-25 07:19:30][353029495460307][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:19:30][353029495460307][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 10434 14427 24834560 239788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:19:30][353029495460307][300 ms][DEBUG] targetPkg: running [2025-08-25 07:19:30][353029495460307][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 07:19:30][353029495460307][300 ms][DEBUG] START check_boot_completed [2025-08-25 07:19:30][353029495460307][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:19:30][353029495460307][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:19:30][353029495460307][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:19:30][353029495460307][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 07:19:30][353029495460307][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 07:19:30][353029495460307][409 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:19:30][353029495460307][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495460307\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9469\"}'\'' -e'"" [2025-08-25 07:19:30][353029495460307][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:19:30][353029495460307][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495460307\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9469\"}'\'' -e'"" [2025-08-25 07:19:34][353029495460307][4127 ms][DEBUG] proc_open done in 3718 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 07:19:34][353029495460307][4127 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-08-25 07:19:34][353029495460307][4127 ms][WARN] Detected error: Process with pid 10434 either refused to load frida-agent, or terminated during injection [2025-08-25 07:19:34][353029495460307][4127 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 07:19:34][353029495460307][4283 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 07:19:34][353029495460307][4283 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 07:19:34][353029495460307][4283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 07:19:34][353029495460307][4424 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 07:19:34][353029495460307][4424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 07:19:34][353029495460307][4580 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 07:19:36][353029495460307][6595 ms][DEBUG] START check_boot_completed [2025-08-25 07:19:36][353029495460307][6595 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:19:37][353029495460307][6642 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:19:37][353029495460307][6642 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:19:37][353029495460307][6689 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:19:37][353029495460307][6689 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 07:19:40][353029495460307][9704 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 07:19:40][353029495460307][9704 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495460307\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9469\"}'\'' -e'"" [2025-08-25 07:19:43][353029495460307][13281 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 07:19:43][353029495460307][13437 ms][DEBUG] proc_open done in 3734 ms; code=255; res.len=115 [2025-08-25 07:19:43][353029495460307][13437 ms][DEBUG] END runCmdUntilRes#2 in 3734 ms [2025-08-25 07:19:43][353029495460307][13437 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 07:19:44][][0 ms][INFO] === Request start === [2025-08-25 07:19:44][][1 ms][DEBUG] START check_scloud [2025-08-25 07:19:44][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:19:44][][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 12267 14427 23609852 123800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:19:44][][246 ms][DEBUG] targetPkg: running [2025-08-25 07:19:44][][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-25 07:19:44][][246 ms][DEBUG] START check_boot_completed [2025-08-25 07:19:44][][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:19:44][][293 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:19:44][][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:19:44][][355 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 07:19:44][][355 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 07:19:44][][355 ms][DEBUG] rawBody.length=1129 [2025-08-25 07:19:44][][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX410ACAT\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1149\"}'\'' -e'"" [2025-08-25 07:19:44][][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:19:44][][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX410ACAT\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1149\"}'\'' -e'"" [2025-08-25 07:19:48][][4057 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 07:19:48][][4214 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=115 [2025-08-25 07:19:48][][4214 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 07:19:48][][4214 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 07:19:50][353029495460307][0 ms][INFO] === Request start === [2025-08-25 07:19:50][353029495460307][1 ms][DEBUG] START check_scloud [2025-08-25 07:19:50][353029495460307][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:19:50][353029495460307][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 12267 14427 23756548 136828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:19:50][353029495460307][275 ms][DEBUG] targetPkg: running [2025-08-25 07:19:50][353029495460307][275 ms][DEBUG] END check_scloud in 274 ms [2025-08-25 07:19:50][353029495460307][275 ms][DEBUG] START check_boot_completed [2025-08-25 07:19:50][353029495460307][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:19:50][353029495460307][322 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:19:50][353029495460307][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:19:51][353029495460307][369 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:19:51][353029495460307][369 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 07:19:51][353029495460307][369 ms][DEBUG] rawBody.length=1149 [2025-08-25 07:19:51][353029495460307][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495460307\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6105\"}'\'' -e'"" [2025-08-25 07:19:51][353029495460307][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:19:51][353029495460307][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495460307\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6105\"}'\'' -e'"" [2025-08-25 07:19:55][353029495460307][4383 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 07:19:55][353029495460307][4539 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=107 [2025-08-25 07:19:55][353029495460307][4539 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-25 07:19:55][353029495460307][4539 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 07:19:55][][0 ms][INFO] === Request start === [2025-08-25 07:19:55][][1 ms][DEBUG] START check_scloud [2025-08-25 07:19:55][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:19:55][][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 12267 14427 23949404 149016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:19:55][][247 ms][DEBUG] targetPkg: running [2025-08-25 07:19:55][][247 ms][DEBUG] END check_scloud in 246 ms [2025-08-25 07:19:55][][247 ms][DEBUG] START check_boot_completed [2025-08-25 07:19:55][][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:19:55][][293 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 07:19:55][][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:19:55][][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:19:55][][341 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 07:19:55][][341 ms][DEBUG] rawBody.length=1130 [2025-08-25 07:19:55][][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX410ACAT\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8571\"}'\'' -e'"" [2025-08-25 07:19:55][][341 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:19:55][][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX410ACAT\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8571\"}'\'' -e'"" [2025-08-25 07:19:59][][4121 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 07:19:59][][4277 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=107 [2025-08-25 07:19:59][][4277 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-25 07:19:59][][4277 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 07:20:05][351283761660247][1 ms][INFO] === Request start === [2025-08-25 07:20:05][351283761660247][1 ms][DEBUG] START check_scloud [2025-08-25 07:20:05][351283761660247][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:20:05][351283761660247][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 12267 14427 24020076 160564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:20:05][351283761660247][302 ms][DEBUG] targetPkg: running [2025-08-25 07:20:05][351283761660247][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 07:20:05][351283761660247][302 ms][DEBUG] START check_boot_completed [2025-08-25 07:20:05][351283761660247][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:20:05][351283761660247][347 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 07:20:05][351283761660247][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:20:05][351283761660247][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:20:05][351283761660247][394 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 07:20:05][351283761660247][394 ms][DEBUG] START check_internet [2025-08-25 07:20:05][351283761660247][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 07:20:06][351283761660247][691 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.560/174.560/174.560/0.000 ms\n [2025-08-25 07:20:06][351283761660247][691 ms][DEBUG] check_internet: online [2025-08-25 07:20:06][351283761660247][691 ms][DEBUG] END check_internet in 297 ms [2025-08-25 07:20:06][351283761660247][691 ms][DEBUG] rawBody.length=1149 [2025-08-25 07:20:06][351283761660247][691 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351283761660247\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5599\"}'\'' -e'"" [2025-08-25 07:20:06][351283761660247][691 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:20:06][351283761660247][691 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351283761660247\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5599\"}'\'' -e'"" [2025-08-25 07:20:12][351283761660247][6752 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6126a373-de9d-4f00-809d-fff372da62be","id":"QR_6126a373-de9d-4f00-809d-fff372da62be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:20:12][351283761660247][6908 ms][DEBUG] proc_open done in 6217 ms; code=255; res.len=3343 [2025-08-25 07:20:12][351283761660247][6908 ms][DEBUG] END runCmdUntilRes#1 in 6217 ms [2025-08-25 07:20:12][351283761660247][6908 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:21:03][351165700469774][1 ms][INFO] === Request start === [2025-08-25 07:21:03][351165700469774][1 ms][DEBUG] START check_scloud [2025-08-25 07:21:03][351165700469774][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:21:03][351165700469774][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 12267 14427 24090888 172144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:21:03][351165700469774][316 ms][DEBUG] targetPkg: running [2025-08-25 07:21:03][351165700469774][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 07:21:03][351165700469774][316 ms][DEBUG] START check_boot_completed [2025-08-25 07:21:03][351165700469774][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:21:03][351165700469774][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:21:03][351165700469774][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:21:03][351165700469774][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 07:21:03][351165700469774][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 07:21:03][351165700469774][425 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:21:03][351165700469774][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351165700469774\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2941\"}'\'' -e'"" [2025-08-25 07:21:03][351165700469774][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:21:03][351165700469774][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351165700469774\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2941\"}'\'' -e'"" [2025-08-25 07:21:07][351165700469774][4533 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_012e1e32-e0cc-444c-b3ba-1dba76a3ebe7","id":"QR_012e1e32-e0cc-444c-b3ba-1dba76a3ebe7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:21:08][351165700469774][4690 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 07:21:08][351165700469774][4690 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-08-25 07:21:08][351165700469774][4690 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:33:04][350572364911812][1 ms][INFO] === Request start === [2025-08-25 07:33:04][350572364911812][1 ms][DEBUG] START check_scloud [2025-08-25 07:33:04][350572364911812][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:33:05][350572364911812][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 12267 14427 24232360 184312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:33:05][350572364911812][298 ms][DEBUG] targetPkg: running [2025-08-25 07:33:05][350572364911812][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 07:33:05][350572364911812][298 ms][DEBUG] START check_boot_completed [2025-08-25 07:33:05][350572364911812][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:33:05][350572364911812][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 07:33:05][350572364911812][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:33:05][350572364911812][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:33:05][350572364911812][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 07:33:05][350572364911812][376 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:33:05][350572364911812][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572364911812\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SOZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9824\"}'\'' -e'"" [2025-08-25 07:33:05][350572364911812][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:33:05][350572364911812][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572364911812\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SOZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9824\"}'\'' -e'"" [2025-08-25 07:33:08][350572364911812][4125 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_32ad62bd-84f6-448b-aede-360466ea2b5d","id":"QR_32ad62bd-84f6-448b-aede-360466ea2b5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:33:09][350572364911812][4282 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-25 07:33:09][350572364911812][4282 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 07:33:09][350572364911812][4282 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:33:11][357866606491218][0 ms][INFO] === Request start === [2025-08-25 07:33:11][357866606491218][1 ms][DEBUG] START check_scloud [2025-08-25 07:33:11][357866606491218][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:33:11][357866606491218][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 12267 14427 24427196 195128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:33:11][357866606491218][290 ms][DEBUG] targetPkg: running [2025-08-25 07:33:11][357866606491218][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-25 07:33:11][357866606491218][290 ms][DEBUG] START check_boot_completed [2025-08-25 07:33:11][357866606491218][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:33:11][357866606491218][321 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 07:33:11][357866606491218][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:33:11][357866606491218][383 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 07:33:11][357866606491218][383 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 07:33:11][357866606491218][383 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:33:11][357866606491218][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866606491218\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8989\"}'\'' -e'"" [2025-08-25 07:33:11][357866606491218][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:33:11][357866606491218][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866606491218\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8989\"}'\'' -e'"" [2025-08-25 07:33:15][357866606491218][4210 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fdf0231e-fa57-4d2c-ab6a-abe38c56cff0","id":"QR_fdf0231e-fa57-4d2c-ab6a-abe38c56cff0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:33:15][357866606491218][4366 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-25 07:33:15][357866606491218][4367 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 07:33:15][357866606491218][4367 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:35:03][353341129309564][0 ms][INFO] === Request start === [2025-08-25 07:35:03][353341129309564][1 ms][DEBUG] START check_scloud [2025-08-25 07:35:03][353341129309564][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:35:03][353341129309564][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 12267 14427 24559484 206496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:35:03][353341129309564][323 ms][DEBUG] targetPkg: running [2025-08-25 07:35:03][353341129309564][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-25 07:35:03][353341129309564][323 ms][DEBUG] START check_boot_completed [2025-08-25 07:35:03][353341129309564][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:35:03][353341129309564][370 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:35:03][353341129309564][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:35:03][353341129309564][432 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 07:35:03][353341129309564][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 07:35:03][353341129309564][432 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:35:03][353341129309564][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353341129309564\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1118\"}'\'' -e'"" [2025-08-25 07:35:03][353341129309564][432 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:35:03][353341129309564][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353341129309564\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1118\"}'\'' -e'"" [2025-08-25 07:35:08][353341129309564][4743 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36547b77-5e2b-4c26-8448-6e8204828d70","id":"QR_36547b77-5e2b-4c26-8448-6e8204828d70","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:35:08][353341129309564][4899 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-25 07:35:08][353341129309564][4899 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-25 07:35:08][353341129309564][4900 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:35:10][358141435417316][1 ms][INFO] === Request start === [2025-08-25 07:35:10][358141435417316][1 ms][DEBUG] START check_scloud [2025-08-25 07:35:10][358141435417316][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:35:10][358141435417316][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 12267 14427 24720516 218360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:35:10][358141435417316][287 ms][DEBUG] targetPkg: running [2025-08-25 07:35:10][358141435417316][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-25 07:35:10][358141435417316][288 ms][DEBUG] START check_boot_completed [2025-08-25 07:35:10][358141435417316][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:35:10][358141435417316][334 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 07:35:10][358141435417316][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:35:11][358141435417316][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:35:11][358141435417316][381 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 07:35:11][358141435417316][381 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:35:11][358141435417316][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435417316\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4290\"}'\'' -e'"" [2025-08-25 07:35:11][358141435417316][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:35:11][358141435417316][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435417316\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4290\"}'\'' -e'"" [2025-08-25 07:35:14][358141435417316][4020 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46b873ef-1a69-4c90-b740-c31bed8fc7c7","id":"QR_46b873ef-1a69-4c90-b740-c31bed8fc7c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:35:14][358141435417316][4177 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=3343 [2025-08-25 07:35:14][358141435417316][4177 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-25 07:35:14][358141435417316][4177 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:39:05][355151134127390][1 ms][INFO] === Request start === [2025-08-25 07:39:05][355151134127390][1 ms][DEBUG] START check_scloud [2025-08-25 07:39:05][355151134127390][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:39:05][355151134127390][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 12267 14427 24807556 229096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:39:05][355151134127390][305 ms][DEBUG] targetPkg: running [2025-08-25 07:39:05][355151134127390][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 07:39:05][355151134127390][305 ms][DEBUG] START check_boot_completed [2025-08-25 07:39:05][355151134127390][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:39:05][355151134127390][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 07:39:05][355151134127390][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:39:05][355151134127390][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:39:05][355151134127390][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 07:39:05][355151134127390][383 ms][DEBUG] rawBody.length=1158 [2025-08-25 07:39:05][355151134127390][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355151134127390\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W900XKMM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4511\"}'\'' -e'"" [2025-08-25 07:39:05][355151134127390][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:39:05][355151134127390][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355151134127390\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W900XKMM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4511\"}'\'' -e'"" [2025-08-25 07:39:09][355151134127390][4539 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9bbc8b98-e67d-4829-a489-24f2805a8b8b","id":"QR_9bbc8b98-e67d-4829-a489-24f2805a8b8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:39:09][355151134127390][4695 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 07:39:09][355151134127390][4695 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 07:39:09][355151134127390][4695 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:43:04][354791649223746][1 ms][INFO] === Request start === [2025-08-25 07:43:04][354791649223746][1 ms][DEBUG] START check_scloud [2025-08-25 07:43:04][354791649223746][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:43:04][354791649223746][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 12267 14427 24956268 241036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:43:04][354791649223746][291 ms][DEBUG] targetPkg: running [2025-08-25 07:43:04][354791649223746][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-25 07:43:04][354791649223746][291 ms][DEBUG] START check_boot_completed [2025-08-25 07:43:04][354791649223746][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:43:04][354791649223746][322 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 07:43:04][354791649223746][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:43:04][354791649223746][385 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 07:43:04][354791649223746][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 07:43:04][354791649223746][385 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:43:04][354791649223746][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791649223746\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2871\"}'\'' -e'"" [2025-08-25 07:43:04][354791649223746][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:43:04][354791649223746][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791649223746\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2871\"}'\'' -e'"" [2025-08-25 07:43:08][354791649223746][4181 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 07:43:08][354791649223746][4181 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-25 07:43:08][354791649223746][4181 ms][WARN] Detected error: Process with pid 12267 either refused to load frida-agent, or terminated during injection [2025-08-25 07:43:08][354791649223746][4181 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 07:43:08][354791649223746][4321 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 07:43:08][354791649223746][4321 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 07:43:08][354791649223746][4321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 07:43:09][354791649223746][4447 ms][DEBUG] SU: done in 126 ms; out [2025-08-25 07:43:09][354791649223746][4447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 07:43:09][354791649223746][4650 ms][DEBUG] SU: done in 202 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 07:43:11][354791649223746][6664 ms][DEBUG] START check_boot_completed [2025-08-25 07:43:11][354791649223746][6664 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:43:11][354791649223746][6711 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:43:11][354791649223746][6711 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:43:11][354791649223746][6758 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:43:11][354791649223746][6758 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 07:43:14][354791649223746][9773 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 07:43:14][354791649223746][9773 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791649223746\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2871\"}'\'' -e'"" [2025-08-25 07:43:17][354791649223746][13163 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 07:43:17][354791649223746][13319 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=107 [2025-08-25 07:43:17][354791649223746][13319 ms][DEBUG] END runCmdUntilRes#2 in 3546 ms [2025-08-25 07:43:17][354791649223746][13319 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 07:43:18][][0 ms][INFO] === Request start === [2025-08-25 07:43:18][][1 ms][DEBUG] START check_scloud [2025-08-25 07:43:18][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:43:18][][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 14581 14427 23567836 123184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:43:18][][241 ms][DEBUG] targetPkg: running [2025-08-25 07:43:18][][241 ms][DEBUG] END check_scloud in 240 ms [2025-08-25 07:43:18][][241 ms][DEBUG] START check_boot_completed [2025-08-25 07:43:18][][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:43:18][][288 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:43:18][][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:43:18][][365 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 07:43:18][][365 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 07:43:18][][365 ms][DEBUG] rawBody.length=1129 [2025-08-25 07:43:18][][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8R11NZG0V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2139\"}'\'' -e'"" [2025-08-25 07:43:18][][366 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:43:18][][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8R11NZG0V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2139\"}'\'' -e'"" [2025-08-25 07:43:21][][3443 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 07:43:21][][3599 ms][DEBUG] proc_open done in 3234 ms; code=255; res.len=107 [2025-08-25 07:43:21][][3599 ms][DEBUG] END runCmdUntilRes#1 in 3234 ms [2025-08-25 07:43:21][][3599 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 07:43:24][354791649223746][0 ms][INFO] === Request start === [2025-08-25 07:43:24][354791649223746][1 ms][DEBUG] START check_scloud [2025-08-25 07:43:24][354791649223746][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:43:24][354791649223746][243 ms][DEBUG] SU: done in 242 ms; outu0_a118 14581 14427 23733028 135040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:43:24][354791649223746][243 ms][DEBUG] targetPkg: running [2025-08-25 07:43:24][354791649223746][243 ms][DEBUG] END check_scloud in 242 ms [2025-08-25 07:43:24][354791649223746][243 ms][DEBUG] START check_boot_completed [2025-08-25 07:43:24][354791649223746][243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:43:24][354791649223746][321 ms][DEBUG] ADB: done in 78 ms; out [2025-08-25 07:43:24][354791649223746][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:43:24][354791649223746][383 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 07:43:24][354791649223746][383 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 07:43:24][354791649223746][384 ms][DEBUG] rawBody.length=1149 [2025-08-25 07:43:24][354791649223746][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791649223746\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3876\"}'\'' -e'"" [2025-08-25 07:43:24][354791649223746][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:43:24][354791649223746][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791649223746\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3876\"}'\'' -e'"" [2025-08-25 07:43:30][354791649223746][6929 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9836baea-74a8-4080-8af0-0ceb01843b3a","id":"QR_9836baea-74a8-4080-8af0-0ceb01843b3a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:43:31][354791649223746][7085 ms][DEBUG] proc_open done in 6701 ms; code=255; res.len=3343 [2025-08-25 07:43:31][354791649223746][7085 ms][DEBUG] END runCmdUntilRes#1 in 6701 ms [2025-08-25 07:43:31][354791649223746][7085 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:44:03][355858111287662][0 ms][INFO] === Request start === [2025-08-25 07:44:03][355858111287662][1 ms][DEBUG] START check_scloud [2025-08-25 07:44:03][355858111287662][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:44:03][355858111287662][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 14581 14427 23772792 150152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:44:03][355858111287662][304 ms][DEBUG] targetPkg: running [2025-08-25 07:44:03][355858111287662][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 07:44:03][355858111287662][305 ms][DEBUG] START check_boot_completed [2025-08-25 07:44:03][355858111287662][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:44:03][355858111287662][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 07:44:03][355858111287662][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:44:03][355858111287662][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:44:03][355858111287662][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 07:44:03][355858111287662][398 ms][DEBUG] START check_internet [2025-08-25 07:44:03][355858111287662][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 07:44:04][355858111287662][898 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.892/201.892/201.892/0.000 ms\n [2025-08-25 07:44:04][355858111287662][898 ms][DEBUG] check_internet: online [2025-08-25 07:44:04][355858111287662][898 ms][DEBUG] END check_internet in 500 ms [2025-08-25 07:44:04][355858111287662][898 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:44:04][355858111287662][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355858111287662\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1466\"}'\'' -e'"" [2025-08-25 07:44:04][355858111287662][898 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:44:04][355858111287662][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355858111287662\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1466\"}'\'' -e'"" [2025-08-25 07:44:08][355858111287662][4522 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f5f9f0e-8fc6-4e01-8176-146d3a1a1eb2","id":"QR_7f5f9f0e-8fc6-4e01-8176-146d3a1a1eb2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:44:08][355858111287662][4678 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-25 07:44:08][355858111287662][4678 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-25 07:44:08][355858111287662][4678 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:44:10][350178736751678][0 ms][INFO] === Request start === [2025-08-25 07:44:10][350178736751678][1 ms][DEBUG] START check_scloud [2025-08-25 07:44:10][350178736751678][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:44:11][350178736751678][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 14581 14427 23927744 160420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:44:11][350178736751678][308 ms][DEBUG] targetPkg: running [2025-08-25 07:44:11][350178736751678][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 07:44:11][350178736751678][308 ms][DEBUG] START check_boot_completed [2025-08-25 07:44:11][350178736751678][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:44:11][350178736751678][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:44:11][350178736751678][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:44:11][350178736751678][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 07:44:11][350178736751678][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 07:44:11][350178736751678][417 ms][DEBUG] START check_internet [2025-08-25 07:44:11][350178736751678][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 07:44:11][350178736751678][683 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=155 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 155.537/155.537/155.537/0.000 ms\n [2025-08-25 07:44:11][350178736751678][683 ms][DEBUG] check_internet: online [2025-08-25 07:44:11][350178736751678][683 ms][DEBUG] END check_internet in 266 ms [2025-08-25 07:44:11][350178736751678][683 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:44:11][350178736751678][683 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178736751678\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4735\"}'\'' -e'"" [2025-08-25 07:44:11][350178736751678][684 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:44:11][350178736751678][684 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178736751678\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4735\"}'\'' -e'"" [2025-08-25 07:44:14][350178736751678][4135 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5383fc07-b673-470b-aeec-bcc190222046","id":"QR_5383fc07-b673-470b-aeec-bcc190222046","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:44:15][350178736751678][4292 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-08-25 07:44:15][350178736751678][4292 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-25 07:44:15][350178736751678][4292 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:46:03][355644566903817][1 ms][INFO] === Request start === [2025-08-25 07:46:03][355644566903817][1 ms][DEBUG] START check_scloud [2025-08-25 07:46:03][355644566903817][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:46:04][355644566903817][336 ms][DEBUG] SU: done in 335 ms; outu0_a118 14581 14427 24048372 171868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:46:04][355644566903817][337 ms][DEBUG] targetPkg: running [2025-08-25 07:46:04][355644566903817][337 ms][DEBUG] END check_scloud in 336 ms [2025-08-25 07:46:04][355644566903817][337 ms][DEBUG] START check_boot_completed [2025-08-25 07:46:04][355644566903817][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:46:04][355644566903817][383 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 07:46:04][355644566903817][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:46:04][355644566903817][430 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:46:04][355644566903817][430 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 07:46:04][355644566903817][430 ms][DEBUG] START check_internet [2025-08-25 07:46:04][355644566903817][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 07:46:04][355644566903817][790 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.540/251.540/251.540/0.000 ms\n [2025-08-25 07:46:04][355644566903817][790 ms][DEBUG] check_internet: online [2025-08-25 07:46:04][355644566903817][790 ms][DEBUG] END check_internet in 360 ms [2025-08-25 07:46:04][355644566903817][790 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:46:04][355644566903817][790 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355644566903817\",\"model\":\"SM-M127G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7455\"}'\'' -e'"" [2025-08-25 07:46:04][355644566903817][790 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:46:04][355644566903817][790 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355644566903817\",\"model\":\"SM-M127G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7455\"}'\'' -e'"" [2025-08-25 07:46:08][355644566903817][4820 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be0c0b10-24a4-4a5c-a614-14654a41392b","id":"QR_be0c0b10-24a4-4a5c-a614-14654a41392b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:46:08][355644566903817][4976 ms][DEBUG] proc_open done in 4185 ms; code=255; res.len=3343 [2025-08-25 07:46:08][355644566903817][4976 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 07:46:08][355644566903817][4976 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:47:03][358080741515712][0 ms][INFO] === Request start === [2025-08-25 07:47:03][358080741515712][1 ms][DEBUG] START check_scloud [2025-08-25 07:47:03][358080741515712][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:47:03][358080741515712][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 14581 14427 24201048 183680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:47:03][358080741515712][316 ms][DEBUG] targetPkg: running [2025-08-25 07:47:03][358080741515712][316 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 07:47:03][358080741515712][316 ms][DEBUG] START check_boot_completed [2025-08-25 07:47:03][358080741515712][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:47:03][358080741515712][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:47:03][358080741515712][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:47:03][358080741515712][441 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 07:47:03][358080741515712][441 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 07:47:03][358080741515712][441 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:47:03][358080741515712][441 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080741515712\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1007\"}'\'' -e'"" [2025-08-25 07:47:03][358080741515712][441 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:47:03][358080741515712][441 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080741515712\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1007\"}'\'' -e'"" [2025-08-25 07:47:07][358080741515712][4221 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de1e3cac-7218-42a8-8e95-c86127b5f157","id":"QR_de1e3cac-7218-42a8-8e95-c86127b5f157","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:47:07][358080741515712][4378 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-25 07:47:07][358080741515712][4378 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-25 07:47:07][358080741515712][4378 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:51:03][355416333554292][1 ms][INFO] === Request start === [2025-08-25 07:51:03][355416333554292][1 ms][DEBUG] START check_scloud [2025-08-25 07:51:03][355416333554292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:51:03][355416333554292][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 14581 14427 24364028 194512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:51:03][355416333554292][322 ms][DEBUG] targetPkg: running [2025-08-25 07:51:03][355416333554292][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-25 07:51:03][355416333554292][322 ms][DEBUG] START check_boot_completed [2025-08-25 07:51:03][355416333554292][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:51:03][355416333554292][353 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 07:51:03][355416333554292][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:51:03][355416333554292][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:51:03][355416333554292][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 07:51:03][355416333554292][400 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:51:03][355416333554292][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416333554292\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6313\"}'\'' -e'"" [2025-08-25 07:51:03][355416333554292][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:51:03][355416333554292][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416333554292\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6313\"}'\'' -e'"" [2025-08-25 07:51:07][355416333554292][4087 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ec645fb-6c1d-427d-8aa1-713bf5c6b68f","id":"QR_4ec645fb-6c1d-427d-8aa1-713bf5c6b68f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:51:07][355416333554292][4243 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-25 07:51:07][355416333554292][4243 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-25 07:51:07][355416333554292][4243 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:52:02][354485112748178][0 ms][INFO] === Request start === [2025-08-25 07:52:02][354485112748178][1 ms][DEBUG] START check_scloud [2025-08-25 07:52:02][354485112748178][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:52:02][354485112748178][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 14581 14427 24520800 206404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:52:02][354485112748178][306 ms][DEBUG] targetPkg: running [2025-08-25 07:52:02][354485112748178][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 07:52:02][354485112748178][306 ms][DEBUG] START check_boot_completed [2025-08-25 07:52:02][354485112748178][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:52:02][354485112748178][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 07:52:02][354485112748178][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:52:02][354485112748178][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:52:02][354485112748178][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 07:52:02][354485112748178][400 ms][DEBUG] START check_internet [2025-08-25 07:52:02][354485112748178][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 07:52:03][354485112748178][837 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.731/201.731/201.731/0.000 ms\n [2025-08-25 07:52:03][354485112748178][837 ms][DEBUG] check_internet: online [2025-08-25 07:52:03][354485112748178][837 ms][DEBUG] END check_internet in 438 ms [2025-08-25 07:52:03][354485112748178][837 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:52:03][354485112748178][837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485112748178\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7080\"}'\'' -e'"" [2025-08-25 07:52:03][354485112748178][837 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:52:03][354485112748178][837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485112748178\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7080\"}'\'' -e'"" [2025-08-25 07:52:06][354485112748178][4633 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77fdd3cf-b567-4dbf-91f0-78384122babe","id":"QR_77fdd3cf-b567-4dbf-91f0-78384122babe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:52:07][354485112748178][4789 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-25 07:52:07][354485112748178][4789 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-25 07:52:07][354485112748178][4789 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:57:29][355755473090751][1 ms][INFO] === Request start === [2025-08-25 07:57:29][355755473090751][1 ms][DEBUG] START check_scloud [2025-08-25 07:57:29][355755473090751][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:57:29][355755473090751][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 14581 14427 24664288 217276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:57:29][355755473090751][310 ms][DEBUG] targetPkg: running [2025-08-25 07:57:29][355755473090751][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 07:57:29][355755473090751][310 ms][DEBUG] START check_boot_completed [2025-08-25 07:57:29][355755473090751][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:57:29][355755473090751][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 07:57:29][355755473090751][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:57:30][355755473090751][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:57:30][355755473090751][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 07:57:30][355755473090751][388 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:57:30][355755473090751][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755473090751\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6586\"}'\'' -e'"" [2025-08-25 07:57:30][355755473090751][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:57:30][355755473090751][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755473090751\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6586\"}'\'' -e'"" [2025-08-25 07:57:33][355755473090751][4278 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 07:57:34][355755473090751][4434 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=107 [2025-08-25 07:57:34][355755473090751][4434 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-25 07:57:34][355755473090751][4434 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 07:57:34][][0 ms][INFO] === Request start === [2025-08-25 07:57:34][][1 ms][DEBUG] START check_scloud [2025-08-25 07:57:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:57:34][][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 14581 14427 24786216 218024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:57:34][][270 ms][DEBUG] targetPkg: running [2025-08-25 07:57:34][][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-25 07:57:34][][270 ms][DEBUG] START check_boot_completed [2025-08-25 07:57:34][][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:57:34][][301 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 07:57:34][][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:57:34][][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:57:34][][348 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 07:57:34][][348 ms][DEBUG] rawBody.length=1129 [2025-08-25 07:57:34][][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW806513K\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6047\"}'\'' -e'"" [2025-08-25 07:57:34][][348 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:57:34][][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW806513K\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6047\"}'\'' -e'"" [2025-08-25 07:57:38][][3816 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 07:57:38][][3972 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=107 [2025-08-25 07:57:38][][3972 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-25 07:57:38][][3972 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 07:57:40][355755473090751][0 ms][INFO] === Request start === [2025-08-25 07:57:40][355755473090751][1 ms][DEBUG] START check_scloud [2025-08-25 07:57:40][355755473090751][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:57:40][355755473090751][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 14581 14427 24967604 231328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:57:40][355755473090751][260 ms][DEBUG] targetPkg: running [2025-08-25 07:57:40][355755473090751][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 07:57:40][355755473090751][260 ms][DEBUG] START check_boot_completed [2025-08-25 07:57:40][355755473090751][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:57:40][355755473090751][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:57:40][355755473090751][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:57:40][355755473090751][369 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 07:57:40][355755473090751][369 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 07:57:40][355755473090751][369 ms][DEBUG] rawBody.length=1149 [2025-08-25 07:57:40][355755473090751][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755473090751\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7302\"}'\'' -e'"" [2025-08-25 07:57:40][355755473090751][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:57:40][355755473090751][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755473090751\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7302\"}'\'' -e'"" [2025-08-25 07:57:44][355755473090751][3993 ms][DEBUG] proc_open done in 3624 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 07:57:44][355755473090751][3993 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-25 07:57:44][355755473090751][3993 ms][WARN] Detected error: Process with pid 14581 either refused to load frida-agent, or terminated during injection [2025-08-25 07:57:44][355755473090751][3993 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 07:57:44][355755473090751][4134 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 07:57:44][355755473090751][4134 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 07:57:44][355755473090751][4134 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 07:57:44][355755473090751][4259 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 07:57:44][355755473090751][4259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 07:57:45][355755473090751][4415 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 07:57:47][355755473090751][6430 ms][DEBUG] START check_boot_completed [2025-08-25 07:57:47][355755473090751][6430 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:57:47][355755473090751][6477 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:57:47][355755473090751][6477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:57:47][355755473090751][6524 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 07:57:47][355755473090751][6524 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 07:57:50][355755473090751][9539 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 07:57:50][355755473090751][9539 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755473090751\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7302\"}'\'' -e'"" [2025-08-25 07:57:56][355755473090751][15647 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e568585b-1bb8-4e15-be5d-d70ea0764ab2","id":"QR_e568585b-1bb8-4e15-be5d-d70ea0764ab2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:57:56][355755473090751][15803 ms][DEBUG] proc_open done in 6264 ms; code=255; res.len=3343 [2025-08-25 07:57:56][355755473090751][15803 ms][DEBUG] END runCmdUntilRes#2 in 6264 ms [2025-08-25 07:57:56][355755473090751][15803 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 07:58:01][356626098206685][0 ms][INFO] === Request start === [2025-08-25 07:58:01][356626098206685][1 ms][DEBUG] START check_scloud [2025-08-25 07:58:01][356626098206685][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 07:58:02][356626098206685][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 17607 14427 23708264 125856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 07:58:02][356626098206685][250 ms][DEBUG] targetPkg: running [2025-08-25 07:58:02][356626098206685][250 ms][DEBUG] END check_scloud in 249 ms [2025-08-25 07:58:02][356626098206685][250 ms][DEBUG] START check_boot_completed [2025-08-25 07:58:02][356626098206685][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 07:58:02][356626098206685][297 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 07:58:02][356626098206685][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 07:58:02][356626098206685][376 ms][DEBUG] SU: done in 80 ms; out [2025-08-25 07:58:02][356626098206685][377 ms][DEBUG] END check_boot_completed in 127 ms [2025-08-25 07:58:02][356626098206685][377 ms][DEBUG] START check_internet [2025-08-25 07:58:02][356626098206685][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 07:58:02][356626098206685][890 ms][DEBUG] SU: done in 513 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.562/201.562/201.562/0.000 ms\n [2025-08-25 07:58:02][356626098206685][890 ms][DEBUG] check_internet: online [2025-08-25 07:58:02][356626098206685][890 ms][DEBUG] END check_internet in 514 ms [2025-08-25 07:58:02][356626098206685][890 ms][DEBUG] rawBody.length=1148 [2025-08-25 07:58:02][356626098206685][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356626098206685\",\"model\":\"SM-G965F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7847\"}'\'' -e'"" [2025-08-25 07:58:02][356626098206685][891 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 07:58:02][356626098206685][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356626098206685\",\"model\":\"SM-G965F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7847\"}'\'' -e'"" [2025-08-25 07:58:06][356626098206685][4717 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b84682d5-5d5c-499b-8dff-9931330671c4","id":"QR_b84682d5-5d5c-499b-8dff-9931330671c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 07:58:06][356626098206685][4873 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-25 07:58:06][356626098206685][4873 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 07:58:06][356626098206685][4874 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:09:03][350026554010554][1 ms][INFO] === Request start === [2025-08-25 08:09:03][350026554010554][1 ms][DEBUG] START check_scloud [2025-08-25 08:09:03][350026554010554][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:09:03][350026554010554][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 17607 14427 23736764 138236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:09:03][350026554010554][313 ms][DEBUG] targetPkg: running [2025-08-25 08:09:03][350026554010554][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 08:09:03][350026554010554][313 ms][DEBUG] START check_boot_completed [2025-08-25 08:09:03][350026554010554][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:09:03][350026554010554][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 08:09:03][350026554010554][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:09:03][350026554010554][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:09:03][350026554010554][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 08:09:03][350026554010554][391 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:09:03][350026554010554][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026554010554\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8144\"}'\'' -e'"" [2025-08-25 08:09:03][350026554010554][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:09:03][350026554010554][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026554010554\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8144\"}'\'' -e'"" [2025-08-25 08:09:07][350026554010554][4515 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9106aa6-2e7b-400f-a2e2-38bbe613a84b","id":"QR_e9106aa6-2e7b-400f-a2e2-38bbe613a84b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:09:07][350026554010554][4671 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-25 08:09:07][350026554010554][4672 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-25 08:09:07][350026554010554][4672 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:16:03][357450479816205][1 ms][INFO] === Request start === [2025-08-25 08:16:03][357450479816205][1 ms][DEBUG] START check_scloud [2025-08-25 08:16:03][357450479816205][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:16:03][357450479816205][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 17607 14427 23848352 149500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:16:03][357450479816205][296 ms][DEBUG] targetPkg: running [2025-08-25 08:16:03][357450479816205][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-25 08:16:03][357450479816205][297 ms][DEBUG] START check_boot_completed [2025-08-25 08:16:03][357450479816205][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:16:03][357450479816205][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 08:16:03][357450479816205][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:16:03][357450479816205][374 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:16:03][357450479816205][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 08:16:03][357450479816205][374 ms][DEBUG] START check_internet [2025-08-25 08:16:03][357450479816205][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:16:04][357450479816205][875 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.598/202.598/202.598/0.000 ms\n [2025-08-25 08:16:04][357450479816205][875 ms][DEBUG] check_internet: online [2025-08-25 08:16:04][357450479816205][875 ms][DEBUG] END check_internet in 500 ms [2025-08-25 08:16:04][357450479816205][875 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:16:04][357450479816205][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450479816205\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6069\"}'\'' -e'"" [2025-08-25 08:16:04][357450479816205][875 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:16:04][357450479816205][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450479816205\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6069\"}'\'' -e'"" [2025-08-25 08:16:08][357450479816205][5014 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5604fc4-21f2-42ce-95ab-641d0beea48e","id":"QR_c5604fc4-21f2-42ce-95ab-641d0beea48e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:16:08][357450479816205][5170 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-25 08:16:08][357450479816205][5170 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-25 08:16:08][357450479816205][5170 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:20:04][352549930601562][1 ms][INFO] === Request start === [2025-08-25 08:20:04][352549930601562][1 ms][DEBUG] START check_scloud [2025-08-25 08:20:04][352549930601562][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:20:04][352549930601562][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 17607 14427 23991888 161380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:20:04][352549930601562][305 ms][DEBUG] targetPkg: running [2025-08-25 08:20:04][352549930601562][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 08:20:04][352549930601562][305 ms][DEBUG] START check_boot_completed [2025-08-25 08:20:04][352549930601562][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:20:04][352549930601562][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 08:20:04][352549930601562][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:20:04][352549930601562][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:20:04][352549930601562][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 08:20:04][352549930601562][383 ms][DEBUG] START check_internet [2025-08-25 08:20:04][352549930601562][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:20:04][352549930601562][884 ms][DEBUG] SU: done in 501 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.666/204.666/204.666/0.000 ms\n [2025-08-25 08:20:04][352549930601562][884 ms][DEBUG] check_internet: online [2025-08-25 08:20:04][352549930601562][884 ms][DEBUG] END check_internet in 501 ms [2025-08-25 08:20:04][352549930601562][884 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:20:04][352549930601562][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930601562\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1483\"}'\'' -e'"" [2025-08-25 08:20:04][352549930601562][884 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:20:04][352549930601562][885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930601562\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1483\"}'\'' -e'"" [2025-08-25 08:20:09][352549930601562][4897 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c73ad4d0-2a07-43c5-acbc-ab254bc13478","id":"QR_c73ad4d0-2a07-43c5-acbc-ab254bc13478","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:20:09][352549930601562][5053 ms][DEBUG] proc_open done in 4169 ms; code=255; res.len=3343 [2025-08-25 08:20:09][352549930601562][5054 ms][DEBUG] END runCmdUntilRes#1 in 4169 ms [2025-08-25 08:20:09][352549930601562][5054 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:28:03][353302723452093][1 ms][INFO] === Request start === [2025-08-25 08:28:03][353302723452093][1 ms][DEBUG] START check_scloud [2025-08-25 08:28:03][353302723452093][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:28:03][353302723452093][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 17607 14427 24114920 172480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:28:03][353302723452093][314 ms][DEBUG] targetPkg: running [2025-08-25 08:28:03][353302723452093][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 08:28:03][353302723452093][315 ms][DEBUG] START check_boot_completed [2025-08-25 08:28:03][353302723452093][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:28:03][353302723452093][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 08:28:03][353302723452093][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:28:03][353302723452093][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:28:03][353302723452093][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 08:28:03][353302723452093][393 ms][DEBUG] START check_internet [2025-08-25 08:28:03][353302723452093][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:28:03][353302723452093][861 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.941/200.941/200.941/0.000 ms\n [2025-08-25 08:28:03][353302723452093][861 ms][DEBUG] check_internet: online [2025-08-25 08:28:03][353302723452093][862 ms][DEBUG] END check_internet in 469 ms [2025-08-25 08:28:03][353302723452093][862 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:28:03][353302723452093][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302723452093\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9894\"}'\'' -e'"" [2025-08-25 08:28:03][353302723452093][862 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:28:03][353302723452093][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302723452093\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9894\"}'\'' -e'"" [2025-08-25 08:28:07][353302723452093][4673 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_027fcfad-ba9c-4384-a750-cac8a3f533aa","id":"QR_027fcfad-ba9c-4384-a750-cac8a3f533aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:28:07][353302723452093][4829 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-25 08:28:07][353302723452093][4829 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-25 08:28:07][353302723452093][4829 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:29:03][351885219817425][0 ms][INFO] === Request start === [2025-08-25 08:29:03][351885219817425][1 ms][DEBUG] START check_scloud [2025-08-25 08:29:03][351885219817425][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:29:03][351885219817425][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 17607 14427 24279064 183508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:29:03][351885219817425][308 ms][DEBUG] targetPkg: running [2025-08-25 08:29:03][351885219817425][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 08:29:03][351885219817425][308 ms][DEBUG] START check_boot_completed [2025-08-25 08:29:03][351885219817425][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:29:03][351885219817425][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:29:03][351885219817425][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:29:04][351885219817425][433 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 08:29:04][351885219817425][433 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 08:29:04][351885219817425][433 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:29:04][351885219817425][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351885219817425\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2183\"}'\'' -e'"" [2025-08-25 08:29:04][351885219817425][433 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:29:04][351885219817425][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351885219817425\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2183\"}'\'' -e'"" [2025-08-25 08:29:07][351885219817425][4338 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2c12d57f-2270-4784-9ce1-f41d307cb181","id":"QR_2c12d57f-2270-4784-9ce1-f41d307cb181","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:29:08][351885219817425][4494 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-25 08:29:08][351885219817425][4494 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-25 08:29:08][351885219817425][4494 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:30:08][350858550765744][1 ms][INFO] === Request start === [2025-08-25 08:30:08][350858550765744][1 ms][DEBUG] START check_scloud [2025-08-25 08:30:08][350858550765744][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:30:09][350858550765744][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 17607 14427 24394876 195600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:30:09][350858550765744][294 ms][DEBUG] targetPkg: running [2025-08-25 08:30:09][350858550765744][294 ms][DEBUG] END check_scloud in 292 ms [2025-08-25 08:30:09][350858550765744][294 ms][DEBUG] START check_boot_completed [2025-08-25 08:30:09][350858550765744][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:30:09][350858550765744][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 08:30:09][350858550765744][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:30:09][350858550765744][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:30:09][350858550765744][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 08:30:09][350858550765744][372 ms][DEBUG] START check_internet [2025-08-25 08:30:09][350858550765744][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:30:09][350858550765744][700 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.190/239.190/239.190/0.000 ms\n [2025-08-25 08:30:09][350858550765744][700 ms][DEBUG] check_internet: online [2025-08-25 08:30:09][350858550765744][700 ms][DEBUG] END check_internet in 328 ms [2025-08-25 08:30:09][350858550765744][700 ms][DEBUG] rawBody.length=1159 [2025-08-25 08:30:09][350858550765744][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350858550765744\",\"model\":\"SM-X510\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52XC0C9S4F\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2710\"}'\'' -e'"" [2025-08-25 08:30:09][350858550765744][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:30:09][350858550765744][700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350858550765744\",\"model\":\"SM-X510\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52XC0C9S4F\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2710\"}'\'' -e'"" [2025-08-25 08:30:15][350858550765744][6479 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41518c4b-030f-442a-8910-ffdb302ef3a7","id":"QR_41518c4b-030f-442a-8910-ffdb302ef3a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:30:15][350858550765744][6636 ms][DEBUG] proc_open done in 5935 ms; code=255; res.len=3343 [2025-08-25 08:30:15][350858550765744][6636 ms][DEBUG] END runCmdUntilRes#1 in 5936 ms [2025-08-25 08:30:15][350858550765744][6636 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:31:02][350938289489251][0 ms][INFO] === Request start === [2025-08-25 08:31:02][350938289489251][1 ms][DEBUG] START check_scloud [2025-08-25 08:31:02][350938289489251][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:31:03][350938289489251][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 17607 14427 24535392 206400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:31:03][350938289489251][308 ms][DEBUG] targetPkg: running [2025-08-25 08:31:03][350938289489251][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 08:31:03][350938289489251][308 ms][DEBUG] START check_boot_completed [2025-08-25 08:31:03][350938289489251][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:31:03][350938289489251][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 08:31:03][350938289489251][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:31:03][350938289489251][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:31:03][350938289489251][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 08:31:03][350938289489251][386 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:31:03][350938289489251][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289489251\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6496\"}'\'' -e'"" [2025-08-25 08:31:03][350938289489251][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:31:03][350938289489251][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289489251\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6496\"}'\'' -e'"" [2025-08-25 08:31:07][350938289489251][4510 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ffbab7f8-3ed9-4836-8b05-0c395ae7917c","id":"QR_ffbab7f8-3ed9-4836-8b05-0c395ae7917c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:31:07][350938289489251][4666 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-25 08:31:07][350938289489251][4666 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-25 08:31:07][350938289489251][4666 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:32:08][352549933575987][0 ms][INFO] === Request start === [2025-08-25 08:32:08][352549933575987][1 ms][DEBUG] START check_scloud [2025-08-25 08:32:08][352549933575987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:32:08][352549933575987][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 17607 14427 24694340 218312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:32:08][352549933575987][311 ms][DEBUG] targetPkg: running [2025-08-25 08:32:08][352549933575987][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 08:32:08][352549933575987][311 ms][DEBUG] START check_boot_completed [2025-08-25 08:32:08][352549933575987][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:32:08][352549933575987][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:32:08][352549933575987][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:32:08][352549933575987][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:32:08][352549933575987][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 08:32:08][352549933575987][404 ms][DEBUG] START check_internet [2025-08-25 08:32:08][352549933575987][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:32:09][352549933575987][967 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.581/201.581/201.581/0.000 ms\n [2025-08-25 08:32:09][352549933575987][967 ms][DEBUG] check_internet: online [2025-08-25 08:32:09][352549933575987][967 ms][DEBUG] END check_internet in 563 ms [2025-08-25 08:32:09][352549933575987][967 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:32:09][352549933575987][967 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933575987\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1799\"}'\'' -e'"" [2025-08-25 08:32:09][352549933575987][967 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:32:09][352549933575987][967 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933575987\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1799\"}'\'' -e'"" [2025-08-25 08:32:13][352549933575987][4700 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 08:32:13][352549933575987][4856 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=115 [2025-08-25 08:32:13][352549933575987][4857 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-25 08:32:13][352549933575987][4857 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 08:32:13][][1 ms][INFO] === Request start === [2025-08-25 08:32:13][][1 ms][DEBUG] START check_scloud [2025-08-25 08:32:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:32:13][][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 17607 14427 24869580 229080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:32:13][][246 ms][DEBUG] targetPkg: running [2025-08-25 08:32:13][][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-25 08:32:13][][246 ms][DEBUG] START check_boot_completed [2025-08-25 08:32:13][][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:32:13][][293 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 08:32:13][][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:32:13][][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:32:13][][340 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 08:32:13][][340 ms][DEBUG] START check_internet [2025-08-25 08:32:13][][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:32:14][][652 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.428/162.428/162.428/0.000 ms\n [2025-08-25 08:32:14][][652 ms][DEBUG] check_internet: online [2025-08-25 08:32:14][][652 ms][DEBUG] END check_internet in 312 ms [2025-08-25 08:32:14][][652 ms][DEBUG] rawBody.length=1129 [2025-08-25 08:32:14][][652 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X803D9LZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2124\"}'\'' -e'"" [2025-08-25 08:32:14][][652 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:32:14][][652 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X803D9LZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2124\"}'\'' -e'"" [2025-08-25 08:32:17][][4104 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 08:32:17][][4261 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=107 [2025-08-25 08:32:17][][4261 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-25 08:32:17][][4261 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 08:32:20][352549933575987][0 ms][INFO] === Request start === [2025-08-25 08:32:20][352549933575987][1 ms][DEBUG] START check_scloud [2025-08-25 08:32:20][352549933575987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:32:20][352549933575987][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 17607 14427 25046868 240816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:32:20][352549933575987][310 ms][DEBUG] targetPkg: running [2025-08-25 08:32:20][352549933575987][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 08:32:20][352549933575987][310 ms][DEBUG] START check_boot_completed [2025-08-25 08:32:20][352549933575987][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:32:20][352549933575987][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 08:32:20][352549933575987][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:32:20][352549933575987][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:32:20][352549933575987][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 08:32:20][352549933575987][388 ms][DEBUG] START check_internet [2025-08-25 08:32:20][352549933575987][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:32:20][352549933575987][622 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.649/138.649/138.649/0.000 ms\n [2025-08-25 08:32:20][352549933575987][622 ms][DEBUG] check_internet: online [2025-08-25 08:32:20][352549933575987][622 ms][DEBUG] END check_internet in 235 ms [2025-08-25 08:32:20][352549933575987][622 ms][DEBUG] rawBody.length=1149 [2025-08-25 08:32:20][352549933575987][622 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933575987\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5641\"}'\'' -e'"" [2025-08-25 08:32:20][352549933575987][622 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:32:20][352549933575987][623 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933575987\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5641\"}'\'' -e'"" [2025-08-25 08:32:24][352549933575987][4215 ms][DEBUG] proc_open done in 3592 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 08:32:24][352549933575987][4215 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-08-25 08:32:24][352549933575987][4215 ms][WARN] Detected error: Process with pid 17607 either refused to load frida-agent, or terminated during injection [2025-08-25 08:32:24][352549933575987][4215 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 08:32:24][352549933575987][4357 ms][DEBUG] SU: done in 142 ms; out [2025-08-25 08:32:24][352549933575987][4357 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 08:32:24][352549933575987][4358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 08:32:24][352549933575987][4481 ms][DEBUG] SU: done in 123 ms; out [2025-08-25 08:32:24][352549933575987][4481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 08:32:24][352549933575987][4621 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 08:32:26][352549933575987][6636 ms][DEBUG] START check_boot_completed [2025-08-25 08:32:26][352549933575987][6636 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:32:26][352549933575987][6683 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:32:26][352549933575987][6683 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:32:26][352549933575987][6746 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 08:32:26][352549933575987][6746 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 08:32:29][352549933575987][9760 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 08:32:29][352549933575987][9760 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933575987\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5641\"}'\'' -e'"" [2025-08-25 08:32:35][352549933575987][15478 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c550a6e-fc74-4d17-aae4-4b7454d2ca08","id":"QR_9c550a6e-fc74-4d17-aae4-4b7454d2ca08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:32:35][352549933575987][15634 ms][DEBUG] proc_open done in 5874 ms; code=255; res.len=3343 [2025-08-25 08:32:35][352549933575987][15634 ms][DEBUG] END runCmdUntilRes#2 in 5874 ms [2025-08-25 08:32:35][352549933575987][15634 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:34:03][351681597295114][0 ms][INFO] === Request start === [2025-08-25 08:34:03][351681597295114][0 ms][DEBUG] START check_scloud [2025-08-25 08:34:03][351681597295114][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:34:03][351681597295114][258 ms][DEBUG] SU: done in 258 ms; outu0_a118 19566 14427 23523184 126420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:34:03][351681597295114][258 ms][DEBUG] targetPkg: running [2025-08-25 08:34:03][351681597295114][258 ms][DEBUG] END check_scloud in 258 ms [2025-08-25 08:34:03][351681597295114][258 ms][DEBUG] START check_boot_completed [2025-08-25 08:34:03][351681597295114][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:34:03][351681597295114][305 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 08:34:03][351681597295114][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:34:03][351681597295114][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:34:03][351681597295114][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 08:34:03][351681597295114][352 ms][DEBUG] START check_internet [2025-08-25 08:34:03][351681597295114][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:34:04][351681597295114][680 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.679/231.679/231.679/0.000 ms\n [2025-08-25 08:34:04][351681597295114][680 ms][DEBUG] check_internet: online [2025-08-25 08:34:04][351681597295114][680 ms][DEBUG] END check_internet in 328 ms [2025-08-25 08:34:04][351681597295114][680 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:34:04][351681597295114][680 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681597295114\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4602\"}'\'' -e'"" [2025-08-25 08:34:04][351681597295114][680 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:34:04][351681597295114][681 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681597295114\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4602\"}'\'' -e'"" [2025-08-25 08:34:08][351681597295114][4679 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a5cb5f5-ed7c-477d-a901-6cf920e7e93a","id":"QR_0a5cb5f5-ed7c-477d-a901-6cf920e7e93a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:34:08][351681597295114][4835 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-08-25 08:34:08][351681597295114][4835 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-25 08:34:08][351681597295114][4836 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:36:03][358309201292292][1 ms][INFO] === Request start === [2025-08-25 08:36:03][358309201292292][1 ms][DEBUG] START check_scloud [2025-08-25 08:36:03][358309201292292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:36:03][358309201292292][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 19566 14427 23611080 137420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:36:03][358309201292292][313 ms][DEBUG] targetPkg: running [2025-08-25 08:36:03][358309201292292][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 08:36:03][358309201292292][313 ms][DEBUG] START check_boot_completed [2025-08-25 08:36:03][358309201292292][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:36:03][358309201292292][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:36:03][358309201292292][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:36:04][358309201292292][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:36:04][358309201292292][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 08:36:04][358309201292292][407 ms][DEBUG] START check_internet [2025-08-25 08:36:04][358309201292292][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:36:04][358309201292292][703 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=176 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 176.686/176.686/176.686/0.000 ms\n [2025-08-25 08:36:04][358309201292292][704 ms][DEBUG] check_internet: online [2025-08-25 08:36:04][358309201292292][704 ms][DEBUG] END check_internet in 297 ms [2025-08-25 08:36:04][358309201292292][704 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:36:04][358309201292292][704 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358309201292292\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2365\"}'\'' -e'"" [2025-08-25 08:36:04][358309201292292][704 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:36:04][358309201292292][704 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358309201292292\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2365\"}'\'' -e'"" [2025-08-25 08:36:08][358309201292292][4734 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8ee82d8-53dd-4013-b522-0fa247035141","id":"QR_b8ee82d8-53dd-4013-b522-0fa247035141","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:36:08][358309201292292][4890 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 08:36:08][358309201292292][4890 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 08:36:08][358309201292292][4890 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:37:03][355291291027213][0 ms][INFO] === Request start === [2025-08-25 08:37:03][355291291027213][1 ms][DEBUG] START check_scloud [2025-08-25 08:37:03][355291291027213][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:37:03][355291291027213][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 19566 14427 23748616 149152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:37:03][355291291027213][315 ms][DEBUG] targetPkg: running [2025-08-25 08:37:03][355291291027213][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 08:37:03][355291291027213][315 ms][DEBUG] START check_boot_completed [2025-08-25 08:37:03][355291291027213][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:37:03][355291291027213][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 08:37:03][355291291027213][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:37:03][355291291027213][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:37:03][355291291027213][409 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 08:37:03][355291291027213][409 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:37:03][355291291027213][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291291027213\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9193\"}'\'' -e'"" [2025-08-25 08:37:03][355291291027213][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:37:03][355291291027213][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291291027213\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9193\"}'\'' -e'"" [2025-08-25 08:37:06][355291291027213][3861 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 08:37:07][355291291027213][4017 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=115 [2025-08-25 08:37:07][355291291027213][4017 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-25 08:37:07][355291291027213][4017 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 08:37:07][][0 ms][INFO] === Request start === [2025-08-25 08:37:07][][1 ms][DEBUG] START check_scloud [2025-08-25 08:37:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:37:07][][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 19566 14427 23887952 160012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:37:07][][318 ms][DEBUG] targetPkg: running [2025-08-25 08:37:07][][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 08:37:07][][319 ms][DEBUG] START check_boot_completed [2025-08-25 08:37:07][][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:37:07][][350 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 08:37:07][][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:37:07][][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:37:07][][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 08:37:07][][397 ms][DEBUG] rawBody.length=1129 [2025-08-25 08:37:07][][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W80LP7BX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1596\"}'\'' -e'"" [2025-08-25 08:37:07][][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:37:07][][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W80LP7BX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1596\"}'\'' -e'"" [2025-08-25 08:37:11][][4052 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 08:37:11][][4208 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=107 [2025-08-25 08:37:11][][4208 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-25 08:37:11][][4208 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 08:37:13][355291291027213][0 ms][INFO] === Request start === [2025-08-25 08:37:13][355291291027213][1 ms][DEBUG] START check_scloud [2025-08-25 08:37:13][355291291027213][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:37:14][355291291027213][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 19566 14427 24034648 171052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:37:14][355291291027213][316 ms][DEBUG] targetPkg: running [2025-08-25 08:37:14][355291291027213][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 08:37:14][355291291027213][316 ms][DEBUG] START check_boot_completed [2025-08-25 08:37:14][355291291027213][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:37:14][355291291027213][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 08:37:14][355291291027213][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:37:14][355291291027213][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:37:14][355291291027213][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 08:37:14][355291291027213][409 ms][DEBUG] rawBody.length=1149 [2025-08-25 08:37:14][355291291027213][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291291027213\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2211\"}'\'' -e'"" [2025-08-25 08:37:14][355291291027213][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:37:14][355291291027213][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291291027213\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2211\"}'\'' -e'"" [2025-08-25 08:37:19][355291291027213][5830 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0481277-51ad-4950-bd19-92fbadecfb0e","id":"QR_e0481277-51ad-4950-bd19-92fbadecfb0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:37:19][355291291027213][5986 ms][DEBUG] proc_open done in 5577 ms; code=255; res.len=3343 [2025-08-25 08:37:19][355291291027213][5986 ms][DEBUG] END runCmdUntilRes#1 in 5577 ms [2025-08-25 08:37:19][355291291027213][5986 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:38:03][351723300578582][0 ms][INFO] === Request start === [2025-08-25 08:38:03][351723300578582][1 ms][DEBUG] START check_scloud [2025-08-25 08:38:03][351723300578582][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:38:03][351723300578582][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 19566 14427 24113652 183204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:38:03][351723300578582][292 ms][DEBUG] targetPkg: running [2025-08-25 08:38:03][351723300578582][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-25 08:38:03][351723300578582][292 ms][DEBUG] START check_boot_completed [2025-08-25 08:38:03][351723300578582][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:38:03][351723300578582][323 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 08:38:03][351723300578582][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:38:03][351723300578582][372 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 08:38:03][351723300578582][372 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 08:38:03][351723300578582][372 ms][DEBUG] START check_internet [2025-08-25 08:38:03][351723300578582][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:38:04][351723300578582][870 ms][DEBUG] SU: done in 498 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.364/202.364/202.364/0.000 ms\n [2025-08-25 08:38:04][351723300578582][870 ms][DEBUG] check_internet: online [2025-08-25 08:38:04][351723300578582][870 ms][DEBUG] END check_internet in 499 ms [2025-08-25 08:38:04][351723300578582][870 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:38:04][351723300578582][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351723300578582\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9601\"}'\'' -e'"" [2025-08-25 08:38:04][351723300578582][870 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:38:04][351723300578582][870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351723300578582\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9601\"}'\'' -e'"" [2025-08-25 08:38:08][351723300578582][4666 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f432e776-c56c-4f56-863c-152ca06a7f98","id":"QR_f432e776-c56c-4f56-863c-152ca06a7f98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:38:08][351723300578582][4822 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-25 08:38:08][351723300578582][4822 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-25 08:38:08][351723300578582][4822 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:38:10][353182203864508][1 ms][INFO] === Request start === [2025-08-25 08:38:10][353182203864508][1 ms][DEBUG] START check_scloud [2025-08-25 08:38:10][353182203864508][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:38:10][353182203864508][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 19566 14427 24274556 194080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:38:10][353182203864508][288 ms][DEBUG] targetPkg: running [2025-08-25 08:38:10][353182203864508][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-25 08:38:10][353182203864508][288 ms][DEBUG] START check_boot_completed [2025-08-25 08:38:10][353182203864508][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:38:10][353182203864508][334 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 08:38:10][353182203864508][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:38:10][353182203864508][397 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 08:38:10][353182203864508][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 08:38:10][353182203864508][397 ms][DEBUG] START check_internet [2025-08-25 08:38:10][353182203864508][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:38:11][353182203864508][787 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=230 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 230.050/230.050/230.050/0.000 ms\n [2025-08-25 08:38:11][353182203864508][787 ms][DEBUG] check_internet: online [2025-08-25 08:38:11][353182203864508][787 ms][DEBUG] END check_internet in 391 ms [2025-08-25 08:38:11][353182203864508][788 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:38:11][353182203864508][788 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182203864508\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3210\"}'\'' -e'"" [2025-08-25 08:38:11][353182203864508][788 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:38:11][353182203864508][788 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182203864508\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3210\"}'\'' -e'"" [2025-08-25 08:38:15][353182203864508][4849 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b822905b-bc29-4f4d-806f-d76aedeb33e0","id":"QR_b822905b-bc29-4f4d-806f-d76aedeb33e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:38:15][353182203864508][5005 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-25 08:38:15][353182203864508][5005 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-25 08:38:15][353182203864508][5005 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:39:05][352546732025214][0 ms][INFO] === Request start === [2025-08-25 08:39:05][352546732025214][1 ms][DEBUG] START check_scloud [2025-08-25 08:39:05][352546732025214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:39:05][352546732025214][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 19566 14427 24395636 206304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:39:05][352546732025214][284 ms][DEBUG] targetPkg: running [2025-08-25 08:39:05][352546732025214][284 ms][DEBUG] END check_scloud in 284 ms [2025-08-25 08:39:05][352546732025214][285 ms][DEBUG] START check_boot_completed [2025-08-25 08:39:05][352546732025214][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:39:05][352546732025214][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 08:39:05][352546732025214][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:39:05][352546732025214][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:39:05][352546732025214][378 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 08:39:05][352546732025214][378 ms][DEBUG] rawBody.length=1150 [2025-08-25 08:39:05][352546732025214][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546732025214\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2655\"}'\'' -e'"" [2025-08-25 08:39:05][352546732025214][378 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:39:05][352546732025214][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546732025214\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2655\"}'\'' -e'"" [2025-08-25 08:39:11][352546732025214][6095 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea1ef41f-e245-4de4-a7d9-c4c0ce4f0d44","id":"QR_ea1ef41f-e245-4de4-a7d9-c4c0ce4f0d44","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:39:11][352546732025214][6251 ms][DEBUG] proc_open done in 5874 ms; code=255; res.len=3343 [2025-08-25 08:39:11][352546732025214][6251 ms][DEBUG] END runCmdUntilRes#1 in 5874 ms [2025-08-25 08:39:11][352546732025214][6252 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:39:16][355195301745260][0 ms][INFO] === Request start === [2025-08-25 08:39:16][355195301745260][1 ms][DEBUG] START check_scloud [2025-08-25 08:39:16][355195301745260][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:39:16][355195301745260][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 19566 14427 24531452 217176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:39:16][355195301745260][285 ms][DEBUG] targetPkg: running [2025-08-25 08:39:16][355195301745260][285 ms][DEBUG] END check_scloud in 285 ms [2025-08-25 08:39:16][355195301745260][285 ms][DEBUG] START check_boot_completed [2025-08-25 08:39:16][355195301745260][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:39:17][355195301745260][332 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 08:39:17][355195301745260][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:39:17][355195301745260][394 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 08:39:17][355195301745260][394 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 08:39:17][355195301745260][395 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:39:17][355195301745260][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195301745260\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3702\"}'\'' -e'"" [2025-08-25 08:39:17][355195301745260][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:39:17][355195301745260][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195301745260\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3702\"}'\'' -e'"" [2025-08-25 08:39:21][355195301745260][4471 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d97fb2e2-f225-4b77-8e63-e3824b3a3758","id":"QR_d97fb2e2-f225-4b77-8e63-e3824b3a3758","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:39:21][355195301745260][4628 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 08:39:21][355195301745260][4628 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 08:39:21][355195301745260][4628 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:43:03][351877473549588][1 ms][INFO] === Request start === [2025-08-25 08:43:03][351877473549588][1 ms][DEBUG] START check_scloud [2025-08-25 08:43:03][351877473549588][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:43:03][351877473549588][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 19566 14427 24693464 201872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:43:03][351877473549588][317 ms][DEBUG] targetPkg: running [2025-08-25 08:43:03][351877473549588][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 08:43:03][351877473549588][317 ms][DEBUG] START check_boot_completed [2025-08-25 08:43:03][351877473549588][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:43:03][351877473549588][347 ms][DEBUG] ADB: done in 30 ms; out [2025-08-25 08:43:03][351877473549588][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:43:03][351877473549588][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:43:03][351877473549588][394 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-25 08:43:03][351877473549588][394 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:43:03][351877473549588][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877473549588\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2807\"}'\'' -e'"" [2025-08-25 08:43:03][351877473549588][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:43:03][351877473549588][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877473549588\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2807\"}'\'' -e'"" [2025-08-25 08:43:08][351877473549588][4518 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec8c16a2-a420-4d31-8829-13b2b0453cbe","id":"QR_ec8c16a2-a420-4d31-8829-13b2b0453cbe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:43:08][351877473549588][4674 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-25 08:43:08][351877473549588][4674 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-25 08:43:08][351877473549588][4674 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:44:03][350857482287728][0 ms][INFO] === Request start === [2025-08-25 08:44:03][350857482287728][1 ms][DEBUG] START check_scloud [2025-08-25 08:44:03][350857482287728][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:44:03][350857482287728][338 ms][DEBUG] SU: done in 337 ms; outu0_a118 19566 14427 24797120 160976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:44:03][350857482287728][338 ms][DEBUG] targetPkg: running [2025-08-25 08:44:03][350857482287728][338 ms][DEBUG] END check_scloud in 338 ms [2025-08-25 08:44:03][350857482287728][338 ms][DEBUG] START check_boot_completed [2025-08-25 08:44:03][350857482287728][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:44:03][350857482287728][385 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:44:03][350857482287728][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:44:03][350857482287728][447 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 08:44:03][350857482287728][448 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 08:44:03][350857482287728][448 ms][DEBUG] START check_internet [2025-08-25 08:44:03][350857482287728][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:44:04][350857482287728][916 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.682/201.682/201.682/0.000 ms\n [2025-08-25 08:44:04][350857482287728][916 ms][DEBUG] check_internet: online [2025-08-25 08:44:04][350857482287728][916 ms][DEBUG] END check_internet in 469 ms [2025-08-25 08:44:04][350857482287728][916 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:44:04][350857482287728][916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857482287728\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6698\"}'\'' -e'"" [2025-08-25 08:44:04][350857482287728][917 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:44:04][350857482287728][917 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857482287728\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6698\"}'\'' -e'"" [2025-08-25 08:44:08][350857482287728][4759 ms][DEBUG] proc_open done in 3842 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 08:44:08][350857482287728][4759 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-25 08:44:08][350857482287728][4759 ms][WARN] Detected error: Process with pid 19566 either refused to load frida-agent, or terminated during injection [2025-08-25 08:44:08][350857482287728][4759 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 08:44:08][350857482287728][4884 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 08:44:08][350857482287728][4884 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 08:44:08][350857482287728][4884 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 08:44:08][350857482287728][5024 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 08:44:08][350857482287728][5024 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 08:44:08][350857482287728][5165 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 08:44:10][350857482287728][7180 ms][DEBUG] START check_boot_completed [2025-08-25 08:44:10][350857482287728][7180 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:44:10][350857482287728][7227 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:44:10][350857482287728][7227 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:44:10][350857482287728][7290 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 08:44:10][350857482287728][7290 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 08:44:13][350857482287728][10304 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 08:44:13][350857482287728][10304 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857482287728\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6698\"}'\'' -e'"" [2025-08-25 08:44:18][350857482287728][14569 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b625ef4-ae69-42c0-8c34-994ebfa5bbb6","id":"QR_6b625ef4-ae69-42c0-8c34-994ebfa5bbb6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:44:18][350857482287728][14725 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3343 [2025-08-25 08:44:18][350857482287728][14725 ms][DEBUG] END runCmdUntilRes#2 in 4421 ms [2025-08-25 08:44:18][350857482287728][14726 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:44:20][353548755540375][0 ms][INFO] === Request start === [2025-08-25 08:44:20][353548755540375][1 ms][DEBUG] START check_scloud [2025-08-25 08:44:20][353548755540375][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:44:20][353548755540375][234 ms][DEBUG] SU: done in 234 ms; outu0_a118 22032 14427 23606808 124172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:44:20][353548755540375][234 ms][DEBUG] targetPkg: running [2025-08-25 08:44:20][353548755540375][235 ms][DEBUG] END check_scloud in 234 ms [2025-08-25 08:44:20][353548755540375][235 ms][DEBUG] START check_boot_completed [2025-08-25 08:44:20][353548755540375][235 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:44:21][353548755540375][281 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 08:44:21][353548755540375][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:44:21][353548755540375][328 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:44:21][353548755540375][328 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 08:44:21][353548755540375][328 ms][DEBUG] START check_internet [2025-08-25 08:44:21][353548755540375][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:44:21][353548755540375][611 ms][DEBUG] SU: done in 283 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.024/185.024/185.024/0.000 ms\n [2025-08-25 08:44:21][353548755540375][611 ms][DEBUG] check_internet: online [2025-08-25 08:44:21][353548755540375][611 ms][DEBUG] END check_internet in 283 ms [2025-08-25 08:44:21][353548755540375][611 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:44:21][353548755540375][611 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548755540375\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7514\"}'\'' -e'"" [2025-08-25 08:44:21][353548755540375][612 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:44:21][353548755540375][612 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548755540375\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7514\"}'\'' -e'"" [2025-08-25 08:44:24][353548755540375][4249 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_00d2d1a8-c260-4562-bab8-0151b0ae4e2e","id":"QR_00d2d1a8-c260-4562-bab8-0151b0ae4e2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:44:25][353548755540375][4405 ms][DEBUG] proc_open done in 3793 ms; code=255; res.len=3343 [2025-08-25 08:44:25][353548755540375][4405 ms][DEBUG] END runCmdUntilRes#1 in 3794 ms [2025-08-25 08:44:25][353548755540375][4405 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:44:28][353154433988670][1 ms][INFO] === Request start === [2025-08-25 08:44:28][353154433988670][1 ms][DEBUG] START check_scloud [2025-08-25 08:44:28][353154433988670][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:44:29][353154433988670][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 22032 14427 23769008 137564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:44:29][353154433988670][251 ms][DEBUG] targetPkg: running [2025-08-25 08:44:29][353154433988670][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-25 08:44:29][353154433988670][251 ms][DEBUG] START check_boot_completed [2025-08-25 08:44:29][353154433988670][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:44:29][353154433988670][297 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 08:44:29][353154433988670][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:44:29][353154433988670][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:44:29][353154433988670][344 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 08:44:29][353154433988670][344 ms][DEBUG] START check_internet [2025-08-25 08:44:29][353154433988670][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:44:29][353154433988670][704 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.935/251.935/251.935/0.000 ms\n [2025-08-25 08:44:29][353154433988670][704 ms][DEBUG] check_internet: online [2025-08-25 08:44:29][353154433988670][704 ms][DEBUG] END check_internet in 360 ms [2025-08-25 08:44:29][353154433988670][704 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:44:29][353154433988670][704 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433988670\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6014\"}'\'' -e'"" [2025-08-25 08:44:29][353154433988670][704 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:44:29][353154433988670][704 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433988670\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6014\"}'\'' -e'"" [2025-08-25 08:44:32][353154433988670][4124 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 08:44:33][353154433988670][4281 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=107 [2025-08-25 08:44:33][353154433988670][4281 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-25 08:44:33][353154433988670][4281 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 08:44:33][][0 ms][INFO] === Request start === [2025-08-25 08:44:33][][1 ms][DEBUG] START check_scloud [2025-08-25 08:44:33][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:44:33][][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 22032 14427 23921620 149304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:44:33][][253 ms][DEBUG] targetPkg: running [2025-08-25 08:44:33][][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-25 08:44:33][][253 ms][DEBUG] START check_boot_completed [2025-08-25 08:44:33][][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:44:33][][284 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 08:44:33][][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:44:33][][331 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:44:33][][331 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 08:44:33][][331 ms][DEBUG] START check_internet [2025-08-25 08:44:33][][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:44:34][][565 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.189/138.189/138.189/0.000 ms\n [2025-08-25 08:44:34][][565 ms][DEBUG] check_internet: online [2025-08-25 08:44:34][][565 ms][DEBUG] END check_internet in 234 ms [2025-08-25 08:44:34][][565 ms][DEBUG] rawBody.length=1129 [2025-08-25 08:44:34][][565 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY11NF0DF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2829\"}'\'' -e'"" [2025-08-25 08:44:34][][565 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:44:34][][566 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY11NF0DF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2829\"}'\'' -e'"" [2025-08-25 08:44:37][][3908 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 08:44:37][][4064 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=107 [2025-08-25 08:44:37][][4065 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-08-25 08:44:37][][4065 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 08:44:39][353154433988670][0 ms][INFO] === Request start === [2025-08-25 08:44:39][353154433988670][1 ms][DEBUG] START check_scloud [2025-08-25 08:44:39][353154433988670][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:44:40][353154433988670][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 22032 14427 23996204 160420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:44:40][353154433988670][258 ms][DEBUG] targetPkg: running [2025-08-25 08:44:40][353154433988670][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-25 08:44:40][353154433988670][258 ms][DEBUG] START check_boot_completed [2025-08-25 08:44:40][353154433988670][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:44:40][353154433988670][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 08:44:40][353154433988670][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:44:40][353154433988670][367 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 08:44:40][353154433988670][367 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 08:44:40][353154433988670][367 ms][DEBUG] START check_internet [2025-08-25 08:44:40][353154433988670][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:44:40][353154433988670][710 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.115/186.115/186.115/0.000 ms\n [2025-08-25 08:44:40][353154433988670][711 ms][DEBUG] check_internet: online [2025-08-25 08:44:40][353154433988670][711 ms][DEBUG] END check_internet in 344 ms [2025-08-25 08:44:40][353154433988670][711 ms][DEBUG] rawBody.length=1149 [2025-08-25 08:44:40][353154433988670][711 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433988670\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4582\"}'\'' -e'"" [2025-08-25 08:44:40][353154433988670][711 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:44:40][353154433988670][711 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433988670\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4582\"}'\'' -e'"" [2025-08-25 08:44:45][353154433988670][5772 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9315f5b5-6d58-4136-ab96-9593df8ea4bb","id":"QR_9315f5b5-6d58-4136-ab96-9593df8ea4bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:44:45][353154433988670][5928 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-08-25 08:44:45][353154433988670][5928 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-08-25 08:44:45][353154433988670][5928 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:47:03][351642489114193][1 ms][INFO] === Request start === [2025-08-25 08:47:03][351642489114193][1 ms][DEBUG] START check_scloud [2025-08-25 08:47:03][351642489114193][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:47:03][351642489114193][381 ms][DEBUG] SU: done in 379 ms; out [2025-08-25 08:47:03][351642489114193][381 ms][WARN] targetPkg: not running, restarting [2025-08-25 08:47:03][351642489114193][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 08:47:04][351642489114193][521 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 08:47:04][351642489114193][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 08:47:04][351642489114193][724 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 08:47:06][351642489114193][2739 ms][DEBUG] END check_scloud in 2738 ms [2025-08-25 08:47:06][351642489114193][2739 ms][DEBUG] START check_boot_completed [2025-08-25 08:47:06][351642489114193][2740 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:47:06][351642489114193][2786 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:47:06][351642489114193][2786 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:47:06][351642489114193][2833 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:47:06][351642489114193][2833 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 08:47:06][351642489114193][2833 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:47:06][351642489114193][2833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642489114193\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4899\"}'\'' -e'"" [2025-08-25 08:47:06][351642489114193][2833 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:47:06][351642489114193][2833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642489114193\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4899\"}'\'' -e'"" [2025-08-25 08:47:11][351642489114193][7722 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a2c2535-3536-4461-8b28-fd6e7b4d1c1b","id":"QR_9a2c2535-3536-4461-8b28-fd6e7b4d1c1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:47:11][351642489114193][7879 ms][DEBUG] proc_open done in 5046 ms; code=255; res.len=3343 [2025-08-25 08:47:11][351642489114193][7879 ms][DEBUG] END runCmdUntilRes#1 in 5046 ms [2025-08-25 08:47:11][351642489114193][7879 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:47:14][350287312492134][0 ms][INFO] === Request start === [2025-08-25 08:47:14][350287312492134][1 ms][DEBUG] START check_scloud [2025-08-25 08:47:14][350287312492134][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:47:14][350287312492134][340 ms][DEBUG] SU: done in 339 ms; outu0_a118 639 22779 23492124 126392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:47:14][350287312492134][340 ms][DEBUG] targetPkg: running [2025-08-25 08:47:14][350287312492134][340 ms][DEBUG] END check_scloud in 339 ms [2025-08-25 08:47:14][350287312492134][340 ms][DEBUG] START check_boot_completed [2025-08-25 08:47:14][350287312492134][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:47:14][350287312492134][387 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:47:14][350287312492134][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:47:14][350287312492134][449 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 08:47:14][350287312492134][449 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 08:47:14][350287312492134][449 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:47:14][350287312492134][449 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287312492134\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3926\"}'\'' -e'"" [2025-08-25 08:47:14][350287312492134][449 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:47:14][350287312492134][449 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287312492134\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3926\"}'\'' -e'"" [2025-08-25 08:47:18][350287312492134][4401 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc3b6342-cee8-4a5e-b58a-275dc1f5ae5d","id":"QR_cc3b6342-cee8-4a5e-b58a-275dc1f5ae5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:47:19][350287312492134][4557 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-25 08:47:19][350287312492134][4557 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-25 08:47:19][350287312492134][4557 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:54:03][350938280148807][1 ms][INFO] === Request start === [2025-08-25 08:54:03][350938280148807][1 ms][DEBUG] START check_scloud [2025-08-25 08:54:03][350938280148807][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:54:04][350938280148807][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 639 22779 23519548 140732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:54:04][350938280148807][316 ms][DEBUG] targetPkg: running [2025-08-25 08:54:04][350938280148807][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 08:54:04][350938280148807][316 ms][DEBUG] START check_boot_completed [2025-08-25 08:54:04][350938280148807][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:54:04][350938280148807][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:54:04][350938280148807][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:54:04][350938280148807][456 ms][DEBUG] SU: done in 93 ms; out [2025-08-25 08:54:04][350938280148807][456 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 08:54:04][350938280148807][456 ms][DEBUG] START check_internet [2025-08-25 08:54:04][350938280148807][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:54:05][350938280148807][1050 ms][DEBUG] SU: done in 594 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.179/202.179/202.179/0.000 ms\n [2025-08-25 08:54:05][350938280148807][1050 ms][DEBUG] check_internet: online [2025-08-25 08:54:05][350938280148807][1050 ms][DEBUG] END check_internet in 594 ms [2025-08-25 08:54:05][350938280148807][1050 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:54:05][350938280148807][1050 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280148807\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8307\"}'\'' -e'"" [2025-08-25 08:54:05][350938280148807][1050 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:54:05][350938280148807][1050 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280148807\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8307\"}'\'' -e'"" [2025-08-25 08:54:09][350938280148807][5158 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd0c1fe2-4241-42d4-8ff4-f713c4a69e2e","id":"QR_dd0c1fe2-4241-42d4-8ff4-f713c4a69e2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:54:09][350938280148807][5315 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 08:54:09][350938280148807][5315 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 08:54:09][350938280148807][5315 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:55:03][350814495577652][0 ms][INFO] === Request start === [2025-08-25 08:55:03][350814495577652][1 ms][DEBUG] START check_scloud [2025-08-25 08:55:03][350814495577652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:55:03][350814495577652][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 639 22779 23699820 152848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:55:03][350814495577652][270 ms][DEBUG] targetPkg: running [2025-08-25 08:55:03][350814495577652][270 ms][DEBUG] END check_scloud in 270 ms [2025-08-25 08:55:03][350814495577652][270 ms][DEBUG] START check_boot_completed [2025-08-25 08:55:03][350814495577652][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:55:04][350814495577652][317 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:55:04][350814495577652][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:55:04][350814495577652][365 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 08:55:04][350814495577652][365 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 08:55:04][350814495577652][365 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:55:04][350814495577652][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495577652\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5181\"}'\'' -e'"" [2025-08-25 08:55:04][350814495577652][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:55:04][350814495577652][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495577652\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5181\"}'\'' -e'"" [2025-08-25 08:55:08][350814495577652][4425 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_471d0a04-960a-413c-9e32-38641efd4e1f","id":"QR_471d0a04-960a-413c-9e32-38641efd4e1f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:55:08][350814495577652][4581 ms][DEBUG] proc_open done in 4216 ms; code=255; res.len=3343 [2025-08-25 08:55:08][350814495577652][4582 ms][DEBUG] END runCmdUntilRes#1 in 4216 ms [2025-08-25 08:55:08][350814495577652][4582 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:55:10][352009447771291][0 ms][INFO] === Request start === [2025-08-25 08:55:10][352009447771291][1 ms][DEBUG] START check_scloud [2025-08-25 08:55:10][352009447771291][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:55:11][352009447771291][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 639 22779 23877236 163944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:55:11][352009447771291][266 ms][DEBUG] targetPkg: running [2025-08-25 08:55:11][352009447771291][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-25 08:55:11][352009447771291][266 ms][DEBUG] START check_boot_completed [2025-08-25 08:55:11][352009447771291][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:55:11][352009447771291][312 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:55:11][352009447771291][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:55:11][352009447771291][361 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 08:55:11][352009447771291][361 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 08:55:11][352009447771291][361 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:55:11][352009447771291][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009447771291\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3584\"}'\'' -e'"" [2025-08-25 08:55:11][352009447771291][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:55:11][352009447771291][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009447771291\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3584\"}'\'' -e'"" [2025-08-25 08:55:15][352009447771291][4436 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_084d934f-f75c-4a55-b7c4-74612847a7ab","id":"QR_084d934f-f75c-4a55-b7c4-74612847a7ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:55:15][352009447771291][4592 ms][DEBUG] proc_open done in 4231 ms; code=255; res.len=3343 [2025-08-25 08:55:15][352009447771291][4593 ms][DEBUG] END runCmdUntilRes#1 in 4231 ms [2025-08-25 08:55:15][352009447771291][4593 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:57:03][352397459931071][1 ms][INFO] === Request start === [2025-08-25 08:57:03][352397459931071][1 ms][DEBUG] START check_scloud [2025-08-25 08:57:03][352397459931071][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:57:04][352397459931071][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 639 22779 23968564 174984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:57:04][352397459931071][320 ms][DEBUG] targetPkg: running [2025-08-25 08:57:04][352397459931071][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-25 08:57:04][352397459931071][320 ms][DEBUG] START check_boot_completed [2025-08-25 08:57:04][352397459931071][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:57:04][352397459931071][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 08:57:04][352397459931071][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:57:04][352397459931071][414 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:57:04][352397459931071][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 08:57:04][352397459931071][414 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:57:04][352397459931071][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397459931071\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5411\"}'\'' -e'"" [2025-08-25 08:57:04][352397459931071][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:57:04][352397459931071][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397459931071\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5411\"}'\'' -e'"" [2025-08-25 08:57:08][352397459931071][4553 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68799a62-cc8b-466e-bc2d-93a5c3c2594e","id":"QR_68799a62-cc8b-466e-bc2d-93a5c3c2594e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:57:08][352397459931071][4710 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-25 08:57:08][352397459931071][4710 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-25 08:57:08][352397459931071][4710 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:57:11][353310803615711][0 ms][INFO] === Request start === [2025-08-25 08:57:11][353310803615711][1 ms][DEBUG] START check_scloud [2025-08-25 08:57:11][353310803615711][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:57:11][353310803615711][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 639 22779 24096700 186624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:57:11][353310803615711][268 ms][DEBUG] targetPkg: running [2025-08-25 08:57:11][353310803615711][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-25 08:57:11][353310803615711][268 ms][DEBUG] START check_boot_completed [2025-08-25 08:57:11][353310803615711][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:57:11][353310803615711][315 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:57:11][353310803615711][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:57:11][353310803615711][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:57:11][353310803615711][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 08:57:11][353310803615711][361 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:57:11][353310803615711][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803615711\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4758\"}'\'' -e'"" [2025-08-25 08:57:11][353310803615711][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:57:11][353310803615711][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803615711\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4758\"}'\'' -e'"" [2025-08-25 08:57:15][353310803615711][4142 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d363813-ed5c-405c-ba1b-a5e643c11631","id":"QR_0d363813-ed5c-405c-ba1b-a5e643c11631","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:57:15][353310803615711][4298 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-25 08:57:15][353310803615711][4298 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-25 08:57:15][353310803615711][4298 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:58:02][357962507814762][1 ms][INFO] === Request start === [2025-08-25 08:58:02][357962507814762][1 ms][DEBUG] START check_scloud [2025-08-25 08:58:02][357962507814762][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:58:03][357962507814762][248 ms][DEBUG] SU: done in 246 ms; outu0_a118 639 22779 24231100 197736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:58:03][357962507814762][248 ms][DEBUG] targetPkg: running [2025-08-25 08:58:03][357962507814762][248 ms][DEBUG] END check_scloud in 247 ms [2025-08-25 08:58:03][357962507814762][248 ms][DEBUG] START check_boot_completed [2025-08-25 08:58:03][357962507814762][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:58:03][357962507814762][295 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:58:03][357962507814762][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:58:03][357962507814762][357 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 08:58:03][357962507814762][357 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 08:58:03][357962507814762][357 ms][DEBUG] START check_internet [2025-08-25 08:58:03][357962507814762][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:58:03][357962507814762][685 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.785/220.785/220.785/0.000 ms\n [2025-08-25 08:58:03][357962507814762][685 ms][DEBUG] check_internet: online [2025-08-25 08:58:03][357962507814762][685 ms][DEBUG] END check_internet in 328 ms [2025-08-25 08:58:03][357962507814762][685 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:58:03][357962507814762][685 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507814762\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7533\"}'\'' -e'"" [2025-08-25 08:58:03][357962507814762][685 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:58:03][357962507814762][685 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507814762\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7533\"}'\'' -e'"" [2025-08-25 08:58:07][357962507814762][4700 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0158f48a-6dab-4b07-845b-2841cdc522f5","id":"QR_0158f48a-6dab-4b07-845b-2841cdc522f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:58:07][357962507814762][4856 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-25 08:58:07][357962507814762][4856 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-25 08:58:07][357962507814762][4856 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:58:10][353499860408423][0 ms][INFO] === Request start === [2025-08-25 08:58:10][353499860408423][1 ms][DEBUG] START check_scloud [2025-08-25 08:58:10][353499860408423][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:58:10][353499860408423][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 639 22779 24359236 209228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:58:10][353499860408423][305 ms][DEBUG] targetPkg: running [2025-08-25 08:58:10][353499860408423][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 08:58:10][353499860408423][305 ms][DEBUG] START check_boot_completed [2025-08-25 08:58:10][353499860408423][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:58:10][353499860408423][351 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 08:58:10][353499860408423][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:58:10][353499860408423][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 08:58:10][353499860408423][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 08:58:10][353499860408423][398 ms][DEBUG] START check_internet [2025-08-25 08:58:10][353499860408423][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 08:58:11][353499860408423][741 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.965/234.965/234.965/0.000 ms\n [2025-08-25 08:58:11][353499860408423][742 ms][DEBUG] check_internet: online [2025-08-25 08:58:11][353499860408423][742 ms][DEBUG] END check_internet in 344 ms [2025-08-25 08:58:11][353499860408423][742 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:58:11][353499860408423][742 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353499860408423\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2880\"}'\'' -e'"" [2025-08-25 08:58:11][353499860408423][742 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:58:11][353499860408423][742 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353499860408423\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2880\"}'\'' -e'"" [2025-08-25 08:58:15][353499860408423][4787 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4ddfc8e-f773-421e-b05d-9b1df3ebe991","id":"QR_d4ddfc8e-f773-421e-b05d-9b1df3ebe991","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:58:15][353499860408423][4943 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-25 08:58:15][353499860408423][4943 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-25 08:58:15][353499860408423][4943 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 08:59:03][353809894412383][1 ms][INFO] === Request start === [2025-08-25 08:59:03][353809894412383][1 ms][DEBUG] START check_scloud [2025-08-25 08:59:03][353809894412383][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 08:59:03][353809894412383][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 639 22779 24462852 220456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 08:59:03][353809894412383][283 ms][DEBUG] targetPkg: running [2025-08-25 08:59:03][353809894412383][283 ms][DEBUG] END check_scloud in 281 ms [2025-08-25 08:59:03][353809894412383][283 ms][DEBUG] START check_boot_completed [2025-08-25 08:59:03][353809894412383][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 08:59:03][353809894412383][329 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 08:59:03][353809894412383][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 08:59:03][353809894412383][407 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 08:59:03][353809894412383][407 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 08:59:03][353809894412383][407 ms][DEBUG] rawBody.length=1148 [2025-08-25 08:59:03][353809894412383][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809894412383\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8236\"}'\'' -e'"" [2025-08-25 08:59:03][353809894412383][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 08:59:03][353809894412383][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809894412383\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8236\"}'\'' -e'"" [2025-08-25 08:59:07][353809894412383][4125 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5401854-b9a3-412d-bbf5-ce49e6c68e6b","id":"QR_a5401854-b9a3-412d-bbf5-ce49e6c68e6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 08:59:07][353809894412383][4281 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-25 08:59:07][353809894412383][4281 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-25 08:59:07][353809894412383][4281 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:02:03][357298585577835][1 ms][INFO] === Request start === [2025-08-25 09:02:03][357298585577835][1 ms][DEBUG] START check_scloud [2025-08-25 09:02:03][357298585577835][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:02:03][357298585577835][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 639 22779 24621672 232544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:02:03][357298585577835][246 ms][DEBUG] targetPkg: running [2025-08-25 09:02:03][357298585577835][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-25 09:02:03][357298585577835][246 ms][DEBUG] START check_boot_completed [2025-08-25 09:02:03][357298585577835][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:02:03][357298585577835][293 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:02:03][357298585577835][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:02:03][357298585577835][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:02:03][357298585577835][340 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 09:02:03][357298585577835][340 ms][DEBUG] START check_internet [2025-08-25 09:02:03][357298585577835][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:02:03][357298585577835][824 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.609/202.609/202.609/0.000 ms\n [2025-08-25 09:02:03][357298585577835][824 ms][DEBUG] check_internet: online [2025-08-25 09:02:03][357298585577835][824 ms][DEBUG] END check_internet in 484 ms [2025-08-25 09:02:03][357298585577835][824 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:02:03][357298585577835][824 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357298585577835\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3780\"}'\'' -e'"" [2025-08-25 09:02:03][357298585577835][824 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:02:03][357298585577835][824 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357298585577835\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3780\"}'\'' -e'"" [2025-08-25 09:02:08][357298585577835][4979 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8e77378-376c-42e6-8786-de6c0e4f6523","id":"QR_a8e77378-376c-42e6-8786-de6c0e4f6523","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:02:08][357298585577835][5135 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 09:02:08][357298585577835][5135 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 09:02:08][357298585577835][5135 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:02:09][350490940496796][0 ms][INFO] === Request start === [2025-08-25 09:02:09][350490940496796][1 ms][DEBUG] START check_scloud [2025-08-25 09:02:09][350490940496796][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:02:10][350490940496796][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 639 22779 24792816 243488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:02:10][350490940496796][318 ms][DEBUG] targetPkg: running [2025-08-25 09:02:10][350490940496796][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 09:02:10][350490940496796][318 ms][DEBUG] START check_boot_completed [2025-08-25 09:02:10][350490940496796][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:02:10][350490940496796][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:02:10][350490940496796][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:02:10][350490940496796][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:02:10][350490940496796][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 09:02:10][350490940496796][411 ms][DEBUG] START check_internet [2025-08-25 09:02:10][350490940496796][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:02:10][350490940496796][677 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=160 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 160.393/160.393/160.393/0.000 ms\n [2025-08-25 09:02:10][350490940496796][677 ms][DEBUG] check_internet: online [2025-08-25 09:02:10][350490940496796][677 ms][DEBUG] END check_internet in 266 ms [2025-08-25 09:02:10][350490940496796][677 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:02:10][350490940496796][677 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940496796\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4477\"}'\'' -e'"" [2025-08-25 09:02:10][350490940496796][677 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:02:10][350490940496796][677 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940496796\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4477\"}'\'' -e'"" [2025-08-25 09:02:14][350490940496796][4817 ms][DEBUG] proc_open done in 4140 ms (timeout); code=4; out.len=0 err.len=89 [2025-08-25 09:02:14][350490940496796][4817 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-08-25 09:02:14][350490940496796][4817 ms][WARN] Detected error: Process with pid 639 either refused to load frida-agent, or terminated during injection [2025-08-25 09:02:14][350490940496796][4817 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 09:02:14][350490940496796][4973 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 09:02:14][350490940496796][4973 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 09:02:14][350490940496796][4973 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 09:02:14][350490940496796][5114 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 09:02:14][350490940496796][5114 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 09:02:15][350490940496796][5285 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 09:02:17][350490940496796][7300 ms][DEBUG] START check_boot_completed [2025-08-25 09:02:17][350490940496796][7300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:02:17][350490940496796][7347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:02:17][350490940496796][7347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:02:17][350490940496796][7394 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:02:17][350490940496796][7394 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 09:02:20][350490940496796][10409 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 09:02:20][350490940496796][10409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940496796\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4477\"}'\'' -e'"" [2025-08-25 09:02:24][350490940496796][14455 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a43df330-6beb-4419-a6fe-182cc3286ef2","id":"QR_a43df330-6beb-4419-a6fe-182cc3286ef2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:02:24][350490940496796][14611 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-25 09:02:24][350490940496796][14611 ms][DEBUG] END runCmdUntilRes#2 in 4202 ms [2025-08-25 09:02:24][350490940496796][14611 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:03:03][353325475900720][0 ms][INFO] === Request start === [2025-08-25 09:03:03][353325475900720][1 ms][DEBUG] START check_scloud [2025-08-25 09:03:03][353325475900720][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:03:04][353325475900720][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 2400 22779 23537868 127968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:03:04][353325475900720][276 ms][DEBUG] targetPkg: running [2025-08-25 09:03:04][353325475900720][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-25 09:03:04][353325475900720][276 ms][DEBUG] START check_boot_completed [2025-08-25 09:03:04][353325475900720][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:03:04][353325475900720][321 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 09:03:04][353325475900720][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:03:04][353325475900720][399 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 09:03:04][353325475900720][399 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-25 09:03:04][353325475900720][399 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:03:04][353325475900720][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325475900720\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5718\"}'\'' -e'"" [2025-08-25 09:03:04][353325475900720][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:03:04][353325475900720][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353325475900720\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5718\"}'\'' -e'"" [2025-08-25 09:03:09][353325475900720][5241 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9db49dab-88a6-451a-862d-ab1c78538a6b","id":"QR_9db49dab-88a6-451a-862d-ab1c78538a6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:03:09][353325475900720][5398 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-08-25 09:03:09][353325475900720][5398 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-08-25 09:03:09][353325475900720][5398 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:03:11][351234165382789][0 ms][INFO] === Request start === [2025-08-25 09:03:11][351234165382789][1 ms][DEBUG] START check_scloud [2025-08-25 09:03:11][351234165382789][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:03:12][351234165382789][326 ms][DEBUG] SU: done in 326 ms; outu0_a118 2400 22779 23684436 138516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:03:12][351234165382789][326 ms][DEBUG] targetPkg: running [2025-08-25 09:03:12][351234165382789][326 ms][DEBUG] END check_scloud in 326 ms [2025-08-25 09:03:12][351234165382789][326 ms][DEBUG] START check_boot_completed [2025-08-25 09:03:12][351234165382789][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:03:12][351234165382789][373 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:03:12][351234165382789][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:03:12][351234165382789][435 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 09:03:12][351234165382789][435 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 09:03:12][351234165382789][435 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:03:12][351234165382789][435 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234165382789\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7852\"}'\'' -e'"" [2025-08-25 09:03:12][351234165382789][436 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:03:12][351234165382789][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234165382789\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7852\"}'\'' -e'"" [2025-08-25 09:03:16][351234165382789][4590 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72e96125-b47b-4adb-b9a4-0f1debe36eb4","id":"QR_72e96125-b47b-4adb-b9a4-0f1debe36eb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:03:16][351234165382789][4746 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 09:03:16][351234165382789][4747 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 09:03:16][351234165382789][4747 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:03:19][356969644498046][0 ms][INFO] === Request start === [2025-08-25 09:03:19][356969644498046][1 ms][DEBUG] START check_scloud [2025-08-25 09:03:19][356969644498046][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:03:19][356969644498046][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 2400 22779 23831196 150080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:03:19][356969644498046][270 ms][DEBUG] targetPkg: running [2025-08-25 09:03:19][356969644498046][270 ms][DEBUG] END check_scloud in 270 ms [2025-08-25 09:03:19][356969644498046][270 ms][DEBUG] START check_boot_completed [2025-08-25 09:03:19][356969644498046][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:03:19][356969644498046][317 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:03:19][356969644498046][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:03:19][356969644498046][364 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:03:19][356969644498046][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 09:03:19][356969644498046][364 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:03:19][356969644498046][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356969644498046\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7268\"}'\'' -e'"" [2025-08-25 09:03:19][356969644498046][364 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:03:19][356969644498046][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356969644498046\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7268\"}'\'' -e'"" [2025-08-25 09:03:23][356969644498046][4113 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_788100a8-7402-4629-939d-61c81c9a016c","id":"QR_788100a8-7402-4629-939d-61c81c9a016c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:03:23][356969644498046][4269 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-25 09:03:23][356969644498046][4269 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 09:03:23][356969644498046][4269 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:04:03][358475772212686][0 ms][INFO] === Request start === [2025-08-25 09:04:03][358475772212686][1 ms][DEBUG] START check_scloud [2025-08-25 09:04:03][358475772212686][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:04:03][358475772212686][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 2400 22779 23916280 161616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:04:03][358475772212686][318 ms][DEBUG] targetPkg: running [2025-08-25 09:04:03][358475772212686][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 09:04:03][358475772212686][318 ms][DEBUG] START check_boot_completed [2025-08-25 09:04:03][358475772212686][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:04:03][358475772212686][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 09:04:03][358475772212686][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:04:03][358475772212686][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:04:03][358475772212686][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 09:04:03][358475772212686][396 ms][DEBUG] START check_internet [2025-08-25 09:04:03][358475772212686][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:04:04][358475772212686][818 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.945/202.945/202.945/0.000 ms\n [2025-08-25 09:04:04][358475772212686][818 ms][DEBUG] check_internet: online [2025-08-25 09:04:04][358475772212686][818 ms][DEBUG] END check_internet in 422 ms [2025-08-25 09:04:04][358475772212686][818 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:04:04][358475772212686][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358475772212686\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5461\"}'\'' -e'"" [2025-08-25 09:04:04][358475772212686][819 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:04:04][358475772212686][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358475772212686\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5461\"}'\'' -e'"" [2025-08-25 09:04:07][358475772212686][4567 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9b1e065-ce19-47f2-925e-e4db705711fb","id":"QR_c9b1e065-ce19-47f2-925e-e4db705711fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:04:07][358475772212686][4724 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-25 09:04:07][358475772212686][4724 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 09:04:07][358475772212686][4724 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:04:10][351199551371904][1 ms][INFO] === Request start === [2025-08-25 09:04:10][351199551371904][1 ms][DEBUG] START check_scloud [2025-08-25 09:04:10][351199551371904][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:04:10][351199551371904][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 2400 22779 24043384 173408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:04:10][351199551371904][310 ms][DEBUG] targetPkg: running [2025-08-25 09:04:10][351199551371904][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 09:04:10][351199551371904][310 ms][DEBUG] START check_boot_completed [2025-08-25 09:04:10][351199551371904][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:04:10][351199551371904][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 09:04:10][351199551371904][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:04:10][351199551371904][389 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 09:04:10][351199551371904][389 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 09:04:10][351199551371904][389 ms][DEBUG] START check_internet [2025-08-25 09:04:10][351199551371904][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:04:11][351199551371904][716 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.341/202.341/202.341/0.000 ms\n [2025-08-25 09:04:11][351199551371904][717 ms][DEBUG] check_internet: online [2025-08-25 09:04:11][351199551371904][717 ms][DEBUG] END check_internet in 327 ms [2025-08-25 09:04:11][351199551371904][717 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:04:11][351199551371904][717 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199551371904\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6843\"}'\'' -e'"" [2025-08-25 09:04:11][351199551371904][717 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:04:11][351199551371904][717 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199551371904\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6843\"}'\'' -e'"" [2025-08-25 09:04:15][351199551371904][4856 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85d0f660-d105-43b6-bdca-620440e88cac","id":"QR_85d0f660-d105-43b6-bdca-620440e88cac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:04:15][351199551371904][5012 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-25 09:04:15][351199551371904][5012 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-25 09:04:15][351199551371904][5012 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:07:03][355928812024134][1 ms][INFO] === Request start === [2025-08-25 09:07:03][355928812024134][1 ms][DEBUG] START check_scloud [2025-08-25 09:07:03][355928812024134][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:07:03][355928812024134][292 ms][DEBUG] SU: done in 290 ms; outu0_a118 2400 22779 24139628 184940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:07:03][355928812024134][292 ms][DEBUG] targetPkg: running [2025-08-25 09:07:03][355928812024134][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-25 09:07:03][355928812024134][292 ms][DEBUG] START check_boot_completed [2025-08-25 09:07:03][355928812024134][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:07:03][355928812024134][323 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 09:07:03][355928812024134][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:07:03][355928812024134][386 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 09:07:03][355928812024134][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 09:07:03][355928812024134][386 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:07:03][355928812024134][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928812024134\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9172\"}'\'' -e'"" [2025-08-25 09:07:03][355928812024134][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:07:03][355928812024134][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928812024134\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9172\"}'\'' -e'"" [2025-08-25 09:07:07][355928812024134][4369 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af52ab44-bb2c-4980-a83e-973d21bc4df6","id":"QR_af52ab44-bb2c-4980-a83e-973d21bc4df6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:07:07][355928812024134][4525 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-25 09:07:07][355928812024134][4525 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-25 09:07:07][355928812024134][4525 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:07:10][356414811508277][0 ms][INFO] === Request start === [2025-08-25 09:07:10][356414811508277][1 ms][DEBUG] START check_scloud [2025-08-25 09:07:10][356414811508277][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:07:10][356414811508277][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 2400 22779 24282100 196164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:07:10][356414811508277][327 ms][DEBUG] targetPkg: running [2025-08-25 09:07:10][356414811508277][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-25 09:07:10][356414811508277][327 ms][DEBUG] START check_boot_completed [2025-08-25 09:07:10][356414811508277][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:07:10][356414811508277][374 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:07:10][356414811508277][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:07:10][356414811508277][420 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:07:10][356414811508277][420 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 09:07:10][356414811508277][420 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:07:10][356414811508277][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414811508277\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1549\"}'\'' -e'"" [2025-08-25 09:07:10][356414811508277][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:07:10][356414811508277][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414811508277\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1549\"}'\'' -e'"" [2025-08-25 09:07:14][356414811508277][4216 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_234f66ff-a3d4-48ab-9d4f-893adfc6c1a6","id":"QR_234f66ff-a3d4-48ab-9d4f-893adfc6c1a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:07:14][356414811508277][4373 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-25 09:07:14][356414811508277][4373 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-25 09:07:14][356414811508277][4373 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:07:16][354601552229566][0 ms][INFO] === Request start === [2025-08-25 09:07:16][354601552229566][1 ms][DEBUG] START check_scloud [2025-08-25 09:07:16][354601552229566][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:07:17][354601552229566][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 2400 22779 24436860 206864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:07:17][354601552229566][255 ms][DEBUG] targetPkg: running [2025-08-25 09:07:17][354601552229566][255 ms][DEBUG] END check_scloud in 255 ms [2025-08-25 09:07:17][354601552229566][255 ms][DEBUG] START check_boot_completed [2025-08-25 09:07:17][354601552229566][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:07:17][354601552229566][302 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:07:17][354601552229566][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:07:17][354601552229566][350 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 09:07:17][354601552229566][350 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 09:07:17][354601552229566][350 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:07:17][354601552229566][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601552229566\",\"model\":\"SM-S906B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4359\"}'\'' -e'"" [2025-08-25 09:07:17][354601552229566][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:07:17][354601552229566][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601552229566\",\"model\":\"SM-S906B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4359\"}'\'' -e'"" [2025-08-25 09:07:21][354601552229566][4160 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d82be3fa-6fb9-49ac-9103-3ee944807fc7","id":"QR_d82be3fa-6fb9-49ac-9103-3ee944807fc7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:07:21][354601552229566][4316 ms][DEBUG] proc_open done in 3966 ms; code=255; res.len=3343 [2025-08-25 09:07:21][354601552229566][4316 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-25 09:07:21][354601552229566][4317 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:09:03][352288967433397][0 ms][INFO] === Request start === [2025-08-25 09:09:03][352288967433397][1 ms][DEBUG] START check_scloud [2025-08-25 09:09:03][352288967433397][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:09:03][352288967433397][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 2400 22779 24563984 217944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:09:03][352288967433397][321 ms][DEBUG] targetPkg: running [2025-08-25 09:09:03][352288967433397][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-25 09:09:03][352288967433397][321 ms][DEBUG] START check_boot_completed [2025-08-25 09:09:03][352288967433397][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:09:03][352288967433397][352 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 09:09:03][352288967433397][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:09:03][352288967433397][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:09:03][352288967433397][399 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 09:09:03][352288967433397][399 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:09:03][352288967433397][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967433397\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7441\"}'\'' -e'"" [2025-08-25 09:09:03][352288967433397][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:09:03][352288967433397][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967433397\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7441\"}'\'' -e'"" [2025-08-25 09:09:08][352288967433397][4476 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ea1ee10-34f4-4d45-a3af-5673dc143e09","id":"QR_7ea1ee10-34f4-4d45-a3af-5673dc143e09","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:09:08][352288967433397][4632 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 09:09:08][352288967433397][4632 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 09:09:08][352288967433397][4632 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:11:03][351240643271965][1 ms][INFO] === Request start === [2025-08-25 09:11:03][351240643271965][1 ms][DEBUG] START check_scloud [2025-08-25 09:11:03][351240643271965][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:11:04][351240643271965][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 2400 22779 24697336 229860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:11:04][351240643271965][278 ms][DEBUG] targetPkg: running [2025-08-25 09:11:04][351240643271965][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-25 09:11:04][351240643271965][278 ms][DEBUG] START check_boot_completed [2025-08-25 09:11:04][351240643271965][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:11:04][351240643271965][325 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:11:04][351240643271965][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:11:04][351240643271965][387 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 09:11:04][351240643271965][387 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 09:11:04][351240643271965][388 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:11:04][351240643271965][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643271965\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5830\"}'\'' -e'"" [2025-08-25 09:11:04][351240643271965][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:11:04][351240643271965][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643271965\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5830\"}'\'' -e'"" [2025-08-25 09:11:08][351240643271965][4621 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5dcd64e5-df54-4c3c-a450-8d4c35d747d5","id":"QR_5dcd64e5-df54-4c3c-a450-8d4c35d747d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:11:08][351240643271965][4777 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-25 09:11:08][351240643271965][4777 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-25 09:11:08][351240643271965][4777 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:13:03][352600226834688][1 ms][INFO] === Request start === [2025-08-25 09:13:03][352600226834688][1 ms][DEBUG] START check_scloud [2025-08-25 09:13:03][352600226834688][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:13:03][352600226834688][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 2400 22779 24848092 220836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:13:03][352600226834688][283 ms][DEBUG] targetPkg: running [2025-08-25 09:13:03][352600226834688][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-25 09:13:03][352600226834688][283 ms][DEBUG] START check_boot_completed [2025-08-25 09:13:03][352600226834688][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:13:03][352600226834688][329 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 09:13:03][352600226834688][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:13:03][352600226834688][391 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 09:13:03][352600226834688][391 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 09:13:03][352600226834688][391 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:13:03][352600226834688][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226834688\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2336\"}'\'' -e'"" [2025-08-25 09:13:03][352600226834688][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:13:03][352600226834688][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226834688\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2336\"}'\'' -e'"" [2025-08-25 09:13:07][352600226834688][4187 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 09:13:07][352600226834688][4187 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-25 09:13:07][352600226834688][4187 ms][WARN] Detected error: Process with pid 2400 either refused to load frida-agent, or terminated during injection [2025-08-25 09:13:07][352600226834688][4187 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 09:13:07][352600226834688][4343 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 09:13:07][352600226834688][4343 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 09:13:07][352600226834688][4343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 09:13:07][352600226834688][4468 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 09:13:07][352600226834688][4468 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 09:13:07][352600226834688][4625 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 09:13:09][352600226834688][6639 ms][DEBUG] START check_boot_completed [2025-08-25 09:13:09][352600226834688][6640 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:13:09][352600226834688][6686 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:13:09][352600226834688][6686 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:13:09][352600226834688][6735 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 09:13:09][352600226834688][6735 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 09:13:13][352600226834688][9748 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 09:13:13][352600226834688][9748 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226834688\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2336\"}'\'' -e'"" [2025-08-25 09:13:17][352600226834688][13825 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ef64ff3-f338-45d7-960b-d33cf5a05463","id":"QR_5ef64ff3-f338-45d7-960b-d33cf5a05463","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:13:17][352600226834688][13982 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 09:13:17][352600226834688][13982 ms][DEBUG] END runCmdUntilRes#2 in 4234 ms [2025-08-25 09:13:17][352600226834688][13982 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:22:03][352923547634896][1 ms][INFO] === Request start === [2025-08-25 09:22:03][352923547634896][1 ms][DEBUG] START check_scloud [2025-08-25 09:22:03][352923547634896][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:22:04][352923547634896][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 4152 22779 23423100 130068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:22:04][352923547634896][261 ms][DEBUG] targetPkg: running [2025-08-25 09:22:04][352923547634896][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-25 09:22:04][352923547634896][261 ms][DEBUG] START check_boot_completed [2025-08-25 09:22:04][352923547634896][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:22:04][352923547634896][293 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 09:22:04][352923547634896][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:22:04][352923547634896][355 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 09:22:04][352923547634896][355 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 09:22:04][352923547634896][355 ms][DEBUG] START check_internet [2025-08-25 09:22:04][352923547634896][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:22:04][352923547634896][933 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.407/201.407/201.407/0.000 ms\n [2025-08-25 09:22:04][352923547634896][933 ms][DEBUG] check_internet: online [2025-08-25 09:22:04][352923547634896][933 ms][DEBUG] END check_internet in 578 ms [2025-08-25 09:22:04][352923547634896][933 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:22:04][352923547634896][933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923547634896\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6117\"}'\'' -e'"" [2025-08-25 09:22:04][352923547634896][934 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:22:04][352923547634896][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923547634896\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6117\"}'\'' -e'"" [2025-08-25 09:22:08][352923547634896][5010 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea91bbfc-ae55-4a3b-ac44-76f3304ace80","id":"QR_ea91bbfc-ae55-4a3b-ac44-76f3304ace80","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:22:09][352923547634896][5166 ms][DEBUG] proc_open done in 4232 ms; code=255; res.len=3343 [2025-08-25 09:22:09][352923547634896][5166 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 09:22:09][352923547634896][5167 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:31:05][354386276500076][1 ms][INFO] === Request start === [2025-08-25 09:31:05][354386276500076][1 ms][DEBUG] START check_scloud [2025-08-25 09:31:05][354386276500076][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:31:05][354386276500076][281 ms][DEBUG] SU: done in 279 ms; outu0_a118 4152 22779 23576764 141188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:31:05][354386276500076][281 ms][DEBUG] targetPkg: running [2025-08-25 09:31:05][354386276500076][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-25 09:31:05][354386276500076][281 ms][DEBUG] START check_boot_completed [2025-08-25 09:31:05][354386276500076][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:31:05][354386276500076][328 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:31:05][354386276500076][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:31:05][354386276500076][390 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 09:31:05][354386276500076][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 09:31:05][354386276500076][390 ms][DEBUG] rawBody.length=1158 [2025-08-25 09:31:05][354386276500076][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354386276500076\",\"model\":\"SM-X510\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52X208E6PW\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7736\"}'\'' -e'"" [2025-08-25 09:31:05][354386276500076][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:31:05][354386276500076][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354386276500076\",\"model\":\"SM-X510\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52X208E6PW\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7736\"}'\'' -e'"" [2025-08-25 09:31:09][354386276500076][4576 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_705d64f1-30bf-4d0d-a225-5efd03153d8d","id":"QR_705d64f1-30bf-4d0d-a225-5efd03153d8d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:31:09][354386276500076][4733 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-25 09:31:09][354386276500076][4733 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-25 09:31:09][354386276500076][4733 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:31:12][354068195128300][0 ms][INFO] === Request start === [2025-08-25 09:31:12][354068195128300][1 ms][DEBUG] START check_scloud [2025-08-25 09:31:12][354068195128300][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:31:12][354068195128300][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 4152 22779 23721352 151556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:31:12][354068195128300][310 ms][DEBUG] targetPkg: running [2025-08-25 09:31:12][354068195128300][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 09:31:12][354068195128300][310 ms][DEBUG] START check_boot_completed [2025-08-25 09:31:12][354068195128300][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:31:12][354068195128300][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:31:12][354068195128300][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:31:12][354068195128300][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:31:12][354068195128300][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 09:31:12][354068195128300][404 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:31:12][354068195128300][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195128300\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6104\"}'\'' -e'"" [2025-08-25 09:31:12][354068195128300][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:31:12][354068195128300][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195128300\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6104\"}'\'' -e'"" [2025-08-25 09:31:16][354068195128300][4246 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a3f39a4-faa4-48a4-b455-3d4e16a54f1f","id":"QR_1a3f39a4-faa4-48a4-b455-3d4e16a54f1f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:31:16][354068195128300][4402 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-25 09:31:16][354068195128300][4402 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-25 09:31:16][354068195128300][4402 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:31:19][351642483778514][0 ms][INFO] === Request start === [2025-08-25 09:31:19][351642483778514][1 ms][DEBUG] START check_scloud [2025-08-25 09:31:19][351642483778514][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:31:19][351642483778514][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 4152 22779 23857744 163148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:31:19][351642483778514][317 ms][DEBUG] targetPkg: running [2025-08-25 09:31:19][351642483778514][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 09:31:19][351642483778514][317 ms][DEBUG] START check_boot_completed [2025-08-25 09:31:19][351642483778514][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:31:19][351642483778514][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:31:19][351642483778514][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:31:19][351642483778514][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:31:19][351642483778514][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 09:31:19][351642483778514][410 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:31:19][351642483778514][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642483778514\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3040\"}'\'' -e'"" [2025-08-25 09:31:19][351642483778514][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:31:19][351642483778514][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642483778514\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3040\"}'\'' -e'"" [2025-08-25 09:31:23][351642483778514][4190 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f58db237-e5cf-42da-8374-7e5e157ea929","id":"QR_f58db237-e5cf-42da-8374-7e5e157ea929","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:31:23][351642483778514][4347 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-25 09:31:23][351642483778514][4347 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-25 09:31:23][351642483778514][4347 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:34:03][355680651770141][1 ms][INFO] === Request start === [2025-08-25 09:34:03][355680651770141][1 ms][DEBUG] START check_scloud [2025-08-25 09:34:03][355680651770141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:34:03][355680651770141][345 ms][DEBUG] SU: done in 344 ms; outu0_a118 4152 22779 23949100 92900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:34:03][355680651770141][345 ms][DEBUG] targetPkg: running [2025-08-25 09:34:03][355680651770141][345 ms][DEBUG] END check_scloud in 344 ms [2025-08-25 09:34:03][355680651770141][346 ms][DEBUG] START check_boot_completed [2025-08-25 09:34:03][355680651770141][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:34:03][355680651770141][376 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 09:34:03][355680651770141][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:34:03][355680651770141][423 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:34:03][355680651770141][424 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 09:34:03][355680651770141][424 ms][DEBUG] START check_internet [2025-08-25 09:34:03][355680651770141][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:34:03][355680651770141][861 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.205/200.205/200.205/0.000 ms\n [2025-08-25 09:34:03][355680651770141][861 ms][DEBUG] check_internet: online [2025-08-25 09:34:03][355680651770141][861 ms][DEBUG] END check_internet in 437 ms [2025-08-25 09:34:03][355680651770141][861 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:34:03][355680651770141][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680651770141\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9861\"}'\'' -e'"" [2025-08-25 09:34:03][355680651770141][861 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:34:03][355680651770141][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680651770141\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9861\"}'\'' -e'"" [2025-08-25 09:34:08][355680651770141][5438 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_586296ae-0a2b-4bdc-a1ae-0ef9d6f6afdb","id":"QR_586296ae-0a2b-4bdc-a1ae-0ef9d6f6afdb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:34:08][355680651770141][5594 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3343 [2025-08-25 09:34:08][355680651770141][5594 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-08-25 09:34:08][355680651770141][5594 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:34:11][354721981812590][0 ms][INFO] === Request start === [2025-08-25 09:34:11][354721981812590][1 ms][DEBUG] START check_scloud [2025-08-25 09:34:11][354721981812590][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:34:11][354721981812590][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 4152 22779 24122420 102612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:34:11][354721981812590][329 ms][DEBUG] targetPkg: running [2025-08-25 09:34:11][354721981812590][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-25 09:34:11][354721981812590][329 ms][DEBUG] START check_boot_completed [2025-08-25 09:34:11][354721981812590][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:34:11][354721981812590][376 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:34:11][354721981812590][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:34:11][354721981812590][422 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:34:11][354721981812590][423 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 09:34:11][354721981812590][423 ms][DEBUG] START check_internet [2025-08-25 09:34:11][354721981812590][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:34:11][354721981812590][751 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.682/226.682/226.682/0.000 ms\n [2025-08-25 09:34:11][354721981812590][751 ms][DEBUG] check_internet: online [2025-08-25 09:34:11][354721981812590][751 ms][DEBUG] END check_internet in 328 ms [2025-08-25 09:34:11][354721981812590][751 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:34:11][354721981812590][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354721981812590\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9894\"}'\'' -e'"" [2025-08-25 09:34:11][354721981812590][751 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:34:11][354721981812590][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354721981812590\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9894\"}'\'' -e'"" [2025-08-25 09:34:15][354721981812590][4671 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e7c9021-ff7e-48bb-8c60-969f5db76824","id":"QR_3e7c9021-ff7e-48bb-8c60-969f5db76824","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:34:15][354721981812590][4828 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-25 09:34:15][354721981812590][4828 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-25 09:34:15][354721981812590][4828 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:34:18][352949520643729][0 ms][INFO] === Request start === [2025-08-25 09:34:18][352949520643729][1 ms][DEBUG] START check_scloud [2025-08-25 09:34:18][352949520643729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:34:18][352949520643729][324 ms][DEBUG] SU: done in 324 ms; outu0_a118 4152 22779 24277180 115520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:34:18][352949520643729][324 ms][DEBUG] targetPkg: running [2025-08-25 09:34:18][352949520643729][324 ms][DEBUG] END check_scloud in 324 ms [2025-08-25 09:34:18][352949520643729][325 ms][DEBUG] START check_boot_completed [2025-08-25 09:34:18][352949520643729][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:34:18][352949520643729][370 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 09:34:18][352949520643729][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:34:18][352949520643729][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:34:18][352949520643729][416 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 09:34:18][352949520643729][416 ms][DEBUG] START check_internet [2025-08-25 09:34:18][352949520643729][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:34:19][352949520643729][776 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.595/242.595/242.595/0.000 ms\n [2025-08-25 09:34:19][352949520643729][776 ms][DEBUG] check_internet: online [2025-08-25 09:34:19][352949520643729][776 ms][DEBUG] END check_internet in 360 ms [2025-08-25 09:34:19][352949520643729][776 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:34:19][352949520643729][776 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520643729\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5253\"}'\'' -e'"" [2025-08-25 09:34:19][352949520643729][776 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:34:19][352949520643729][776 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520643729\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5253\"}'\'' -e'"" [2025-08-25 09:34:23][352949520643729][4790 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ff6514e-bf90-4944-87f8-7d7cb2bc8c26","id":"QR_6ff6514e-bf90-4944-87f8-7d7cb2bc8c26","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:34:23][352949520643729][4947 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-25 09:34:23][352949520643729][4947 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-25 09:34:23][352949520643729][4947 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:34:25][350471124635615][0 ms][INFO] === Request start === [2025-08-25 09:34:25][350471124635615][1 ms][DEBUG] START check_scloud [2025-08-25 09:34:25][350471124635615][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:34:26][350471124635615][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 4152 22779 24395040 124104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:34:26][350471124635615][322 ms][DEBUG] targetPkg: running [2025-08-25 09:34:26][350471124635615][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-25 09:34:26][350471124635615][322 ms][DEBUG] START check_boot_completed [2025-08-25 09:34:26][350471124635615][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:34:26][350471124635615][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:34:26][350471124635615][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:34:26][350471124635615][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 09:34:26][350471124635615][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 09:34:26][350471124635615][431 ms][DEBUG] START check_internet [2025-08-25 09:34:26][350471124635615][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:34:26][350471124635615][822 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.595/253.595/253.595/0.000 ms\n [2025-08-25 09:34:26][350471124635615][822 ms][DEBUG] check_internet: online [2025-08-25 09:34:26][350471124635615][822 ms][DEBUG] END check_internet in 391 ms [2025-08-25 09:34:26][350471124635615][822 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:34:26][350471124635615][822 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471124635615\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7895\"}'\'' -e'"" [2025-08-25 09:34:26][350471124635615][822 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:34:26][350471124635615][822 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471124635615\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7895\"}'\'' -e'"" [2025-08-25 09:34:30][350471124635615][4743 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33e2a901-f397-497e-8665-c9e05d5469af","id":"QR_33e2a901-f397-497e-8665-c9e05d5469af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:34:30][350471124635615][4899 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-25 09:34:30][350471124635615][4899 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-25 09:34:30][350471124635615][4899 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:36:03][352743953434239][1 ms][INFO] === Request start === [2025-08-25 09:36:03][352743953434239][1 ms][DEBUG] START check_scloud [2025-08-25 09:36:03][352743953434239][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:36:03][352743953434239][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 4152 22779 24517052 136384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:36:03][352743953434239][297 ms][DEBUG] targetPkg: running [2025-08-25 09:36:03][352743953434239][298 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 09:36:03][352743953434239][298 ms][DEBUG] START check_boot_completed [2025-08-25 09:36:03][352743953434239][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:36:03][352743953434239][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:36:03][352743953434239][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:36:03][352743953434239][407 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 09:36:03][352743953434239][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 09:36:03][352743953434239][407 ms][DEBUG] START check_internet [2025-08-25 09:36:03][352743953434239][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:36:03][352743953434239][720 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.087/198.087/198.087/0.000 ms\n [2025-08-25 09:36:03][352743953434239][720 ms][DEBUG] check_internet: online [2025-08-25 09:36:03][352743953434239][720 ms][DEBUG] END check_internet in 313 ms [2025-08-25 09:36:03][352743953434239][720 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:36:03][352743953434239][720 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743953434239\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SOZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7128\"}'\'' -e'"" [2025-08-25 09:36:03][352743953434239][720 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:36:03][352743953434239][720 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743953434239\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SOZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7128\"}'\'' -e'"" [2025-08-25 09:36:07][352743953434239][4749 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1245de05-6e4e-4276-827c-1603376d4e38","id":"QR_1245de05-6e4e-4276-827c-1603376d4e38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:36:08][352743953434239][4905 ms][DEBUG] proc_open done in 4185 ms; code=255; res.len=3343 [2025-08-25 09:36:08][352743953434239][4906 ms][DEBUG] END runCmdUntilRes#1 in 4185 ms [2025-08-25 09:36:08][352743953434239][4906 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:37:03][355647440305828][0 ms][INFO] === Request start === [2025-08-25 09:37:03][355647440305828][1 ms][DEBUG] START check_scloud [2025-08-25 09:37:03][355647440305828][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:37:03][355647440305828][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 4152 22779 24663584 147212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:37:03][355647440305828][314 ms][DEBUG] targetPkg: running [2025-08-25 09:37:03][355647440305828][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 09:37:03][355647440305828][314 ms][DEBUG] START check_boot_completed [2025-08-25 09:37:03][355647440305828][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:37:03][355647440305828][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:37:03][355647440305828][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:37:03][355647440305828][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 09:37:03][355647440305828][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 09:37:03][355647440305828][423 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:37:03][355647440305828][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355647440305828\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8927\"}'\'' -e'"" [2025-08-25 09:37:03][355647440305828][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:37:03][355647440305828][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355647440305828\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8927\"}'\'' -e'"" [2025-08-25 09:37:07][355647440305828][4360 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dfef70b6-b71a-4172-8195-6547b39cc3a5","id":"QR_dfef70b6-b71a-4172-8195-6547b39cc3a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:37:07][355647440305828][4516 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-25 09:37:07][355647440305828][4516 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-25 09:37:07][355647440305828][4516 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:39:03][351351028653071][1 ms][INFO] === Request start === [2025-08-25 09:39:03][351351028653071][1 ms][DEBUG] START check_scloud [2025-08-25 09:39:03][351351028653071][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:39:04][351351028653071][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 4152 22779 24777480 159420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:39:04][351351028653071][304 ms][DEBUG] targetPkg: running [2025-08-25 09:39:04][351351028653071][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 09:39:04][351351028653071][304 ms][DEBUG] START check_boot_completed [2025-08-25 09:39:04][351351028653071][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:39:04][351351028653071][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 09:39:04][351351028653071][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:39:04][351351028653071][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:39:04][351351028653071][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 09:39:04][351351028653071][382 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:39:04][351351028653071][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351028653071\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9176\"}'\'' -e'"" [2025-08-25 09:39:04][351351028653071][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:39:04][351351028653071][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351028653071\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9176\"}'\'' -e'"" [2025-08-25 09:39:08][351351028653071][4553 ms][DEBUG] proc_open done in 4171 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 09:39:08][351351028653071][4553 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-25 09:39:08][351351028653071][4553 ms][WARN] Detected error: Process with pid 4152 either refused to load frida-agent, or terminated during injection [2025-08-25 09:39:08][351351028653071][4553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 09:39:08][351351028653071][4709 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 09:39:08][351351028653071][4709 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 09:39:08][351351028653071][4709 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 09:39:08][351351028653071][4850 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 09:39:08][351351028653071][4850 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 09:39:08][351351028653071][5053 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 09:39:11][351351028653071][7068 ms][DEBUG] START check_boot_completed [2025-08-25 09:39:11][351351028653071][7068 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:39:11][351351028653071][7115 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:39:11][351351028653071][7115 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:39:11][351351028653071][7177 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 09:39:11][351351028653071][7177 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 09:39:14][351351028653071][10192 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 09:39:14][351351028653071][10192 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351028653071\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9176\"}'\'' -e'"" [2025-08-25 09:39:18][351351028653071][14363 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5bc38d87-8c14-49ca-94bb-dd8d4b1a33f2","id":"QR_5bc38d87-8c14-49ca-94bb-dd8d4b1a33f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:39:18][351351028653071][14519 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-08-25 09:39:18][351351028653071][14519 ms][DEBUG] END runCmdUntilRes#2 in 4327 ms [2025-08-25 09:39:18][351351028653071][14519 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:41:03][352600227327187][0 ms][INFO] === Request start === [2025-08-25 09:41:03][352600227327187][1 ms][DEBUG] START check_scloud [2025-08-25 09:41:03][352600227327187][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:41:03][352600227327187][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 7830 22779 23496908 129628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:41:03][352600227327187][298 ms][DEBUG] targetPkg: running [2025-08-25 09:41:03][352600227327187][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 09:41:03][352600227327187][298 ms][DEBUG] START check_boot_completed [2025-08-25 09:41:03][352600227327187][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:41:03][352600227327187][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 09:41:03][352600227327187][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:41:03][352600227327187][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:41:03][352600227327187][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 09:41:03][352600227327187][376 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:41:03][352600227327187][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227327187\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1860\"}'\'' -e'"" [2025-08-25 09:41:03][352600227327187][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:41:03][352600227327187][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227327187\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1860\"}'\'' -e'"" [2025-08-25 09:41:07][352600227327187][4438 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b64d6ee-6a5d-485b-a0b2-b31475fea0c4","id":"QR_9b64d6ee-6a5d-485b-a0b2-b31475fea0c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:41:08][352600227327187][4594 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-25 09:41:08][352600227327187][4594 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-25 09:41:08][352600227327187][4594 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:42:04][352053260995140][1 ms][INFO] === Request start === [2025-08-25 09:42:04][352053260995140][1 ms][DEBUG] START check_scloud [2025-08-25 09:42:04][352053260995140][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:42:04][352053260995140][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 7830 22779 23611620 140760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:42:04][352053260995140][312 ms][DEBUG] targetPkg: running [2025-08-25 09:42:04][352053260995140][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 09:42:04][352053260995140][312 ms][DEBUG] START check_boot_completed [2025-08-25 09:42:04][352053260995140][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:42:04][352053260995140][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:42:04][352053260995140][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:42:04][352053260995140][421 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 09:42:04][352053260995140][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 09:42:04][352053260995140][421 ms][DEBUG] START check_internet [2025-08-25 09:42:04][352053260995140][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:42:05][352053260995140][983 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.089/202.089/202.089/0.000 ms\n [2025-08-25 09:42:05][352053260995140][983 ms][DEBUG] check_internet: online [2025-08-25 09:42:05][352053260995140][983 ms][DEBUG] END check_internet in 562 ms [2025-08-25 09:42:05][352053260995140][983 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:42:05][352053260995140][983 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053260995140\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1823\"}'\'' -e'"" [2025-08-25 09:42:05][352053260995140][984 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:42:05][352053260995140][984 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053260995140\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1823\"}'\'' -e'"" [2025-08-25 09:42:09][352053260995140][5029 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d2c0d746-62e1-4161-81e3-4ac0355bba9c","id":"QR_d2c0d746-62e1-4161-81e3-4ac0355bba9c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:42:09][352053260995140][5185 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-25 09:42:09][352053260995140][5185 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 09:42:09][352053260995140][5186 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:44:03][350900921692502][1 ms][INFO] === Request start === [2025-08-25 09:44:03][350900921692502][1 ms][DEBUG] START check_scloud [2025-08-25 09:44:03][350900921692502][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:44:03][350900921692502][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 7830 22779 23766280 152492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:44:03][350900921692502][269 ms][DEBUG] targetPkg: running [2025-08-25 09:44:03][350900921692502][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-25 09:44:03][350900921692502][269 ms][DEBUG] START check_boot_completed [2025-08-25 09:44:03][350900921692502][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:44:03][350900921692502][316 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:44:03][350900921692502][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:44:03][350900921692502][378 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 09:44:03][350900921692502][378 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 09:44:03][350900921692502][379 ms][DEBUG] START check_internet [2025-08-25 09:44:03][350900921692502][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:44:04][350900921692502][706 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=173 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 173.465/173.465/173.465/0.000 ms\n [2025-08-25 09:44:04][350900921692502][706 ms][DEBUG] check_internet: online [2025-08-25 09:44:04][350900921692502][706 ms][DEBUG] END check_internet in 328 ms [2025-08-25 09:44:04][350900921692502][706 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:44:04][350900921692502][706 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900921692502\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8492\"}'\'' -e'"" [2025-08-25 09:44:04][350900921692502][706 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:44:04][350900921692502][707 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900921692502\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8492\"}'\'' -e'"" [2025-08-25 09:44:08][350900921692502][4877 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c63b83a-7983-4d67-b868-5ad21f3043ec","id":"QR_5c63b83a-7983-4d67-b868-5ad21f3043ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:44:08][350900921692502][5033 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-25 09:44:08][350900921692502][5033 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-25 09:44:08][350900921692502][5033 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:45:03][350013885384288][0 ms][INFO] === Request start === [2025-08-25 09:45:03][350013885384288][1 ms][DEBUG] START check_scloud [2025-08-25 09:45:03][350013885384288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:45:04][350013885384288][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 7830 22779 23927212 163672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:45:04][350013885384288][306 ms][DEBUG] targetPkg: running [2025-08-25 09:45:04][350013885384288][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 09:45:04][350013885384288][306 ms][DEBUG] START check_boot_completed [2025-08-25 09:45:04][350013885384288][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:45:04][350013885384288][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:45:04][350013885384288][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:45:04][350013885384288][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 09:45:04][350013885384288][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 09:45:04][350013885384288][415 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:45:04][350013885384288][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885384288\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3624\"}'\'' -e'"" [2025-08-25 09:45:04][350013885384288][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:45:04][350013885384288][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885384288\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3624\"}'\'' -e'"" [2025-08-25 09:45:08][350013885384288][4555 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf37cf3d-8ed5-4bbb-8e52-d2732e66089a","id":"QR_cf37cf3d-8ed5-4bbb-8e52-d2732e66089a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:45:08][350013885384288][4711 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-25 09:45:08][350013885384288][4711 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-25 09:45:08][350013885384288][4711 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:45:12][359914420705997][0 ms][INFO] === Request start === [2025-08-25 09:45:12][359914420705997][1 ms][DEBUG] START check_scloud [2025-08-25 09:45:12][359914420705997][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:45:12][359914420705997][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 7830 22779 24086196 174556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:45:12][359914420705997][314 ms][DEBUG] targetPkg: running [2025-08-25 09:45:12][359914420705997][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 09:45:12][359914420705997][314 ms][DEBUG] START check_boot_completed [2025-08-25 09:45:12][359914420705997][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:45:12][359914420705997][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:45:12][359914420705997][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:45:13][359914420705997][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 09:45:13][359914420705997][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 09:45:13][359914420705997][423 ms][DEBUG] rawBody.length=1149 [2025-08-25 09:45:13][359914420705997][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359914420705997\",\"model\":\"SM-A236U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1299\"}'\'' -e'"" [2025-08-25 09:45:13][359914420705997][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:45:13][359914420705997][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359914420705997\",\"model\":\"SM-A236U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1299\"}'\'' -e'"" [2025-08-25 09:45:18][359914420705997][5875 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17eae75f-557e-4990-915b-c4d5ed45d8c4","id":"QR_17eae75f-557e-4990-915b-c4d5ed45d8c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:45:18][359914420705997][6031 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-08-25 09:45:18][359914420705997][6031 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-25 09:45:18][359914420705997][6031 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:46:03][356350641633341][0 ms][INFO] === Request start === [2025-08-25 09:46:03][356350641633341][1 ms][DEBUG] START check_scloud [2025-08-25 09:46:03][356350641633341][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:46:03][356350641633341][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 7830 22779 24213484 186780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:46:03][356350641633341][321 ms][DEBUG] targetPkg: running [2025-08-25 09:46:03][356350641633341][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-25 09:46:03][356350641633341][321 ms][DEBUG] START check_boot_completed [2025-08-25 09:46:03][356350641633341][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:46:03][356350641633341][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:46:03][356350641633341][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:46:03][356350641633341][416 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 09:46:03][356350641633341][417 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-25 09:46:03][356350641633341][417 ms][DEBUG] START check_internet [2025-08-25 09:46:03][356350641633341][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:46:04][356350641633341][696 ms][DEBUG] SU: done in 280 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=176 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 176.478/176.478/176.478/0.000 ms\n [2025-08-25 09:46:04][356350641633341][697 ms][DEBUG] check_internet: online [2025-08-25 09:46:04][356350641633341][697 ms][DEBUG] END check_internet in 280 ms [2025-08-25 09:46:04][356350641633341][697 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:46:04][356350641633341][697 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641633341\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9698\"}'\'' -e'"" [2025-08-25 09:46:04][356350641633341][697 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:46:04][356350641633341][697 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641633341\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9698\"}'\'' -e'"" [2025-08-25 09:46:08][356350641633341][4851 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6efbcb7f-d9af-4b00-9936-c91470793b8f","id":"QR_6efbcb7f-d9af-4b00-9936-c91470793b8f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:46:08][356350641633341][5007 ms][DEBUG] proc_open done in 4310 ms; code=255; res.len=3343 [2025-08-25 09:46:08][356350641633341][5007 ms][DEBUG] END runCmdUntilRes#1 in 4310 ms [2025-08-25 09:46:08][356350641633341][5007 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:47:03][356513709366258][1 ms][INFO] === Request start === [2025-08-25 09:47:03][356513709366258][1 ms][DEBUG] START check_scloud [2025-08-25 09:47:03][356513709366258][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:47:03][356513709366258][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 7830 22779 24343632 197720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:47:03][356513709366258][297 ms][DEBUG] targetPkg: running [2025-08-25 09:47:03][356513709366258][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 09:47:03][356513709366258][297 ms][DEBUG] START check_boot_completed [2025-08-25 09:47:03][356513709366258][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:47:03][356513709366258][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:47:03][356513709366258][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:47:03][356513709366258][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 09:47:03][356513709366258][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 09:47:03][356513709366258][406 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:47:03][356513709366258][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513709366258\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5314\"}'\'' -e'"" [2025-08-25 09:47:03][356513709366258][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:47:03][356513709366258][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513709366258\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5314\"}'\'' -e'"" [2025-08-25 09:47:08][356513709366258][4468 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67e6a307-2a4c-40e8-b112-9a1933cba8f4","id":"QR_67e6a307-2a4c-40e8-b112-9a1933cba8f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:47:08][356513709366258][4624 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-25 09:47:08][356513709366258][4624 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-25 09:47:08][356513709366258][4624 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:49:03][352891564893028][0 ms][INFO] === Request start === [2025-08-25 09:49:03][352891564893028][1 ms][DEBUG] START check_scloud [2025-08-25 09:49:03][352891564893028][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:49:03][352891564893028][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 7830 22779 24479924 209860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:49:03][352891564893028][298 ms][DEBUG] targetPkg: running [2025-08-25 09:49:03][352891564893028][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 09:49:03][352891564893028][298 ms][DEBUG] START check_boot_completed [2025-08-25 09:49:03][352891564893028][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:49:03][352891564893028][343 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 09:49:03][352891564893028][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:49:03][352891564893028][392 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 09:49:03][352891564893028][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 09:49:03][352891564893028][392 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:49:03][352891564893028][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352891564893028\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6490\"}'\'' -e'"" [2025-08-25 09:49:03][352891564893028][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:49:03][352891564893028][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352891564893028\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6490\"}'\'' -e'"" [2025-08-25 09:49:07][352891564893028][4467 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f3af76f-932f-47ef-96be-04a919c8e339","id":"QR_6f3af76f-932f-47ef-96be-04a919c8e339","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:49:08][352891564893028][4623 ms][DEBUG] proc_open done in 4231 ms; code=255; res.len=3343 [2025-08-25 09:49:08][352891564893028][4623 ms][DEBUG] END runCmdUntilRes#1 in 4231 ms [2025-08-25 09:49:08][352891564893028][4623 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:49:10][358141436776611][1 ms][INFO] === Request start === [2025-08-25 09:49:10][358141436776611][1 ms][DEBUG] START check_scloud [2025-08-25 09:49:10][358141436776611][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:49:10][358141436776611][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 7830 22779 24651196 220104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:49:10][358141436776611][317 ms][DEBUG] targetPkg: running [2025-08-25 09:49:10][358141436776611][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 09:49:10][358141436776611][317 ms][DEBUG] START check_boot_completed [2025-08-25 09:49:10][358141436776611][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:49:10][358141436776611][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:49:10][358141436776611][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:49:10][358141436776611][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:49:10][358141436776611][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 09:49:10][358141436776611][410 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:49:10][358141436776611][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141436776611\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6266\"}'\'' -e'"" [2025-08-25 09:49:10][358141436776611][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:49:10][358141436776611][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141436776611\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6266\"}'\'' -e'"" [2025-08-25 09:49:14][358141436776611][4206 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d679a4e-9d69-4eac-9ec9-c80540654037","id":"QR_1d679a4e-9d69-4eac-9ec9-c80540654037","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:49:14][358141436776611][4363 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-25 09:49:14][358141436776611][4363 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-25 09:49:14][358141436776611][4363 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:49:17][352665185751090][0 ms][INFO] === Request start === [2025-08-25 09:49:17][352665185751090][1 ms][DEBUG] START check_scloud [2025-08-25 09:49:17][352665185751090][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:49:17][352665185751090][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 7830 22779 24773320 231972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:49:17][352665185751090][312 ms][DEBUG] targetPkg: running [2025-08-25 09:49:17][352665185751090][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 09:49:17][352665185751090][312 ms][DEBUG] START check_boot_completed [2025-08-25 09:49:17][352665185751090][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:49:17][352665185751090][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:49:17][352665185751090][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:49:17][352665185751090][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:49:17][352665185751090][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 09:49:17][352665185751090][406 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:49:17][352665185751090][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665185751090\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7528\"}'\'' -e'"" [2025-08-25 09:49:17][352665185751090][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:49:17][352665185751090][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665185751090\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7528\"}'\'' -e'"" [2025-08-25 09:49:21][352665185751090][4045 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b784e7be-2151-44a6-a575-3df1f9906fcc","id":"QR_b784e7be-2151-44a6-a575-3df1f9906fcc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:49:21][352665185751090][4202 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-08-25 09:49:21][352665185751090][4202 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-25 09:49:21][352665185751090][4202 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:50:03][351786693269069][0 ms][INFO] === Request start === [2025-08-25 09:50:03][351786693269069][1 ms][DEBUG] START check_scloud [2025-08-25 09:50:03][351786693269069][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:50:03][351786693269069][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 7830 22779 24905572 243240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:50:03][351786693269069][292 ms][DEBUG] targetPkg: running [2025-08-25 09:50:03][351786693269069][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-25 09:50:03][351786693269069][292 ms][DEBUG] START check_boot_completed [2025-08-25 09:50:03][351786693269069][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:50:03][351786693269069][323 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 09:50:03][351786693269069][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:50:04][351786693269069][386 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 09:50:04][351786693269069][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 09:50:04][351786693269069][386 ms][DEBUG] START check_internet [2025-08-25 09:50:04][351786693269069][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:50:04][351786693269069][823 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.157/202.157/202.157/0.000 ms\n [2025-08-25 09:50:04][351786693269069][824 ms][DEBUG] check_internet: online [2025-08-25 09:50:04][351786693269069][824 ms][DEBUG] END check_internet in 438 ms [2025-08-25 09:50:04][351786693269069][824 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:50:04][351786693269069][824 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693269069\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5672\"}'\'' -e'"" [2025-08-25 09:50:04][351786693269069][824 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:50:04][351786693269069][824 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693269069\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5672\"}'\'' -e'"" [2025-08-25 09:50:08][351786693269069][4463 ms][DEBUG] proc_open done in 3639 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 09:50:08][351786693269069][4463 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-25 09:50:08][351786693269069][4463 ms][WARN] Detected error: Process with pid 7830 either refused to load frida-agent, or terminated during injection [2025-08-25 09:50:08][351786693269069][4463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 09:50:08][351786693269069][4590 ms][DEBUG] SU: done in 127 ms; out [2025-08-25 09:50:08][351786693269069][4590 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 09:50:08][351786693269069][4590 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 09:50:08][351786693269069][4744 ms][DEBUG] SU: done in 154 ms; out [2025-08-25 09:50:08][351786693269069][4744 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 09:50:08][351786693269069][4885 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 09:50:10][351786693269069][6900 ms][DEBUG] START check_boot_completed [2025-08-25 09:50:10][351786693269069][6900 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:50:10][351786693269069][6947 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 09:50:10][351786693269069][6947 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:50:10][351786693269069][6994 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:50:10][351786693269069][6994 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 09:50:13][351786693269069][10008 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 09:50:13][351786693269069][10008 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693269069\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5672\"}'\'' -e'"" [2025-08-25 09:50:17][351786693269069][14085 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7bc0e17-396e-4355-8a2e-cd05e3eff682","id":"QR_d7bc0e17-396e-4355-8a2e-cd05e3eff682","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:50:17][351786693269069][14242 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 09:50:17][351786693269069][14242 ms][DEBUG] END runCmdUntilRes#2 in 4234 ms [2025-08-25 09:50:17][351786693269069][14242 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:51:03][351393987293101][0 ms][INFO] === Request start === [2025-08-25 09:51:03][351393987293101][1 ms][DEBUG] START check_scloud [2025-08-25 09:51:03][351393987293101][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:51:03][351393987293101][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 9150 22779 23410960 129032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:51:03][351393987293101][312 ms][DEBUG] targetPkg: running [2025-08-25 09:51:03][351393987293101][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 09:51:03][351393987293101][312 ms][DEBUG] START check_boot_completed [2025-08-25 09:51:03][351393987293101][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:51:04][351393987293101][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:51:04][351393987293101][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:51:04][351393987293101][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:51:04][351393987293101][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 09:51:04][351393987293101][405 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:51:04][351393987293101][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351393987293101\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1511\"}'\'' -e'"" [2025-08-25 09:51:04][351393987293101][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:51:04][351393987293101][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351393987293101\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1511\"}'\'' -e'"" [2025-08-25 09:51:07][351393987293101][4107 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 09:51:07][351393987293101][4264 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=115 [2025-08-25 09:51:07][351393987293101][4264 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 09:51:07][351393987293101][4264 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 09:51:08][][0 ms][INFO] === Request start === [2025-08-25 09:51:08][][1 ms][DEBUG] START check_scloud [2025-08-25 09:51:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:51:08][][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 9150 22779 23609844 139820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:51:08][][270 ms][DEBUG] targetPkg: running [2025-08-25 09:51:08][][270 ms][DEBUG] END check_scloud in 270 ms [2025-08-25 09:51:08][][270 ms][DEBUG] START check_boot_completed [2025-08-25 09:51:08][][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:51:08][][317 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:51:08][][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:51:08][][364 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:51:08][][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 09:51:08][][364 ms][DEBUG] rawBody.length=1129 [2025-08-25 09:51:08][][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CTB055HCJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3868\"}'\'' -e'"" [2025-08-25 09:51:08][][364 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:51:08][][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CTB055HCJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3868\"}'\'' -e'"" [2025-08-25 09:51:12][][3785 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 09:51:12][][3941 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=107 [2025-08-25 09:51:12][][3941 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-25 09:51:12][][3941 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 09:51:14][351393987293101][1 ms][INFO] === Request start === [2025-08-25 09:51:14][351393987293101][1 ms][DEBUG] START check_scloud [2025-08-25 09:51:14][351393987293101][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:51:14][351393987293101][259 ms][DEBUG] SU: done in 257 ms; outu0_a118 9150 22779 23760700 151180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:51:14][351393987293101][259 ms][DEBUG] targetPkg: running [2025-08-25 09:51:14][351393987293101][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-25 09:51:14][351393987293101][259 ms][DEBUG] START check_boot_completed [2025-08-25 09:51:14][351393987293101][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:51:14][351393987293101][290 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 09:51:14][351393987293101][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:51:14][351393987293101][337 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:51:14][351393987293101][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 09:51:14][351393987293101][337 ms][DEBUG] rawBody.length=1149 [2025-08-25 09:51:14][351393987293101][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351393987293101\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6932\"}'\'' -e'"" [2025-08-25 09:51:14][351393987293101][337 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:51:14][351393987293101][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351393987293101\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6932\"}'\'' -e'"" [2025-08-25 09:51:22][351393987293101][7569 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_decb69d4-d666-4686-b7ad-af5a7a689465","id":"QR_decb69d4-d666-4686-b7ad-af5a7a689465","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:51:22][351393987293101][7726 ms][DEBUG] proc_open done in 7389 ms; code=255; res.len=3343 [2025-08-25 09:51:22][351393987293101][7726 ms][DEBUG] END runCmdUntilRes#1 in 7389 ms [2025-08-25 09:51:22][351393987293101][7726 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:51:27][351684401954694][0 ms][INFO] === Request start === [2025-08-25 09:51:27][351684401954694][1 ms][DEBUG] START check_scloud [2025-08-25 09:51:27][351684401954694][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:51:27][351684401954694][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 9150 22779 23886780 162460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:51:27][351684401954694][315 ms][DEBUG] targetPkg: running [2025-08-25 09:51:27][351684401954694][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 09:51:27][351684401954694][315 ms][DEBUG] START check_boot_completed [2025-08-25 09:51:27][351684401954694][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:51:27][351684401954694][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:51:27][351684401954694][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:51:27][351684401954694][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 09:51:27][351684401954694][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 09:51:27][351684401954694][409 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:51:27][351684401954694][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684401954694\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6929\"}'\'' -e'"" [2025-08-25 09:51:27][351684401954694][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:51:27][351684401954694][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684401954694\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6929\"}'\'' -e'"" [2025-08-25 09:51:32][351684401954694][5064 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15460291-f039-42ef-9af8-6176fafe1f58","id":"QR_15460291-f039-42ef-9af8-6176fafe1f58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:51:32][351684401954694][5220 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-08-25 09:51:32][351684401954694][5220 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-08-25 09:51:32][351684401954694][5220 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:53:03][355550431105399][0 ms][INFO] === Request start === [2025-08-25 09:53:03][355550431105399][1 ms][DEBUG] START check_scloud [2025-08-25 09:53:03][355550431105399][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:53:03][355550431105399][340 ms][DEBUG] SU: done in 339 ms; outu0_a118 9150 22779 24001588 175004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:53:03][355550431105399][340 ms][DEBUG] targetPkg: running [2025-08-25 09:53:03][355550431105399][340 ms][DEBUG] END check_scloud in 339 ms [2025-08-25 09:53:03][355550431105399][340 ms][DEBUG] START check_boot_completed [2025-08-25 09:53:03][355550431105399][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:53:03][355550431105399][387 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:53:03][355550431105399][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:53:03][355550431105399][449 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 09:53:03][355550431105399][449 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 09:53:03][355550431105399][449 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:53:03][355550431105399][449 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355550431105399\",\"model\":\"SM-X806B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3255\"}'\'' -e'"" [2025-08-25 09:53:03][355550431105399][450 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:53:03][355550431105399][450 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355550431105399\",\"model\":\"SM-X806B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3255\"}'\'' -e'"" [2025-08-25 09:53:08][355550431105399][4760 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68e5507f-afeb-4d32-bde1-241951a3c2f6","id":"QR_68e5507f-afeb-4d32-bde1-241951a3c2f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:53:08][355550431105399][4917 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-25 09:53:08][355550431105399][4917 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-25 09:53:08][355550431105399][4917 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:56:04][350545468643903][1 ms][INFO] === Request start === [2025-08-25 09:56:04][350545468643903][1 ms][DEBUG] START check_scloud [2025-08-25 09:56:04][350545468643903][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:56:04][350545468643903][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 9150 22779 24111256 186148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:56:04][350545468643903][294 ms][DEBUG] targetPkg: running [2025-08-25 09:56:04][350545468643903][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-25 09:56:04][350545468643903][294 ms][DEBUG] START check_boot_completed [2025-08-25 09:56:04][350545468643903][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:56:04][350545468643903][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 09:56:04][350545468643903][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:56:04][350545468643903][388 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 09:56:04][350545468643903][388 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 09:56:04][350545468643903][388 ms][DEBUG] START check_internet [2025-08-25 09:56:04][350545468643903][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:56:05][350545468643903][919 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.198/202.198/202.198/0.000 ms\n [2025-08-25 09:56:05][350545468643903][919 ms][DEBUG] check_internet: online [2025-08-25 09:56:05][350545468643903][920 ms][DEBUG] END check_internet in 531 ms [2025-08-25 09:56:05][350545468643903][920 ms][DEBUG] rawBody.length=1158 [2025-08-25 09:56:05][350545468643903][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545468643903\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YW1026R0E\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3486\"}'\'' -e'"" [2025-08-25 09:56:05][350545468643903][920 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:56:05][350545468643903][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545468643903\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YW1026R0E\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3486\"}'\'' -e'"" [2025-08-25 09:56:09][350545468643903][5028 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2cebdbd-064c-4a25-9137-9addd89ecfb4","id":"QR_f2cebdbd-064c-4a25-9137-9addd89ecfb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:56:09][350545468643903][5184 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 09:56:09][350545468643903][5184 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 09:56:09][350545468643903][5184 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 09:58:03][356413252623116][0 ms][INFO] === Request start === [2025-08-25 09:58:03][356413252623116][1 ms][DEBUG] START check_scloud [2025-08-25 09:58:03][356413252623116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 09:58:04][356413252623116][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 9150 22779 24216956 188976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 09:58:04][356413252623116][320 ms][DEBUG] targetPkg: running [2025-08-25 09:58:04][356413252623116][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-25 09:58:04][356413252623116][320 ms][DEBUG] START check_boot_completed [2025-08-25 09:58:04][356413252623116][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 09:58:04][356413252623116][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 09:58:04][356413252623116][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 09:58:04][356413252623116][415 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 09:58:04][356413252623116][415 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 09:58:04][356413252623116][415 ms][DEBUG] START check_internet [2025-08-25 09:58:04][356413252623116][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 09:58:04][356413252623116][726 ms][DEBUG] SU: done in 310 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.199/203.199/203.199/0.000 ms\n [2025-08-25 09:58:04][356413252623116][726 ms][DEBUG] check_internet: online [2025-08-25 09:58:04][356413252623116][726 ms][DEBUG] END check_internet in 311 ms [2025-08-25 09:58:04][356413252623116][726 ms][DEBUG] rawBody.length=1148 [2025-08-25 09:58:04][356413252623116][726 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356413252623116\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4024\"}'\'' -e'"" [2025-08-25 09:58:04][356413252623116][726 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 09:58:04][356413252623116][726 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356413252623116\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4024\"}'\'' -e'"" [2025-08-25 09:58:08][356413252623116][4803 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_239fefc1-f566-4bbf-a86c-bc3f424327d0","id":"QR_239fefc1-f566-4bbf-a86c-bc3f424327d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 09:58:08][356413252623116][4959 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 09:58:08][356413252623116][4959 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 09:58:08][356413252623116][4959 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:02:03][352600225576033][1 ms][INFO] === Request start === [2025-08-25 10:02:03][352600225576033][1 ms][DEBUG] START check_scloud [2025-08-25 10:02:03][352600225576033][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:02:03][352600225576033][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 9150 22779 24367712 170048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:02:03][352600225576033][320 ms][DEBUG] targetPkg: running [2025-08-25 10:02:03][352600225576033][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-25 10:02:03][352600225576033][320 ms][DEBUG] START check_boot_completed [2025-08-25 10:02:03][352600225576033][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:02:03][352600225576033][367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:02:03][352600225576033][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:02:03][352600225576033][414 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:02:03][352600225576033][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:02:03][352600225576033][414 ms][DEBUG] START check_internet [2025-08-25 10:02:03][352600225576033][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:02:04][352600225576033][867 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.356/202.356/202.356/0.000 ms\n [2025-08-25 10:02:04][352600225576033][867 ms][DEBUG] check_internet: online [2025-08-25 10:02:04][352600225576033][867 ms][DEBUG] END check_internet in 453 ms [2025-08-25 10:02:04][352600225576033][867 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:02:04][352600225576033][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600225576033\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3341\"}'\'' -e'"" [2025-08-25 10:02:04][352600225576033][867 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:02:04][352600225576033][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600225576033\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3341\"}'\'' -e'"" [2025-08-25 10:02:08][352600225576033][5069 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01904415-dc5a-41af-8abd-9b626607be82","id":"QR_01904415-dc5a-41af-8abd-9b626607be82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:02:08][352600225576033][5225 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-25 10:02:08][352600225576033][5225 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-25 10:02:08][352600225576033][5225 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:02:10][351272336608344][0 ms][INFO] === Request start === [2025-08-25 10:02:10][351272336608344][1 ms][DEBUG] START check_scloud [2025-08-25 10:02:10][351272336608344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:02:11][351272336608344][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 9150 22779 24534760 180232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:02:11][351272336608344][316 ms][DEBUG] targetPkg: running [2025-08-25 10:02:11][351272336608344][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 10:02:11][351272336608344][316 ms][DEBUG] START check_boot_completed [2025-08-25 10:02:11][351272336608344][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:02:11][351272336608344][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:02:11][351272336608344][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:02:11][351272336608344][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:02:11][351272336608344][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:02:11][351272336608344][425 ms][DEBUG] START check_internet [2025-08-25 10:02:11][351272336608344][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:02:11][351272336608344][769 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.361/187.361/187.361/0.000 ms\n [2025-08-25 10:02:11][351272336608344][769 ms][DEBUG] check_internet: online [2025-08-25 10:02:11][351272336608344][769 ms][DEBUG] END check_internet in 344 ms [2025-08-25 10:02:11][351272336608344][769 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:02:11][351272336608344][769 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336608344\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2732\"}'\'' -e'"" [2025-08-25 10:02:11][351272336608344][769 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:02:11][351272336608344][770 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336608344\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2732\"}'\'' -e'"" [2025-08-25 10:02:15][351272336608344][4487 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a52bd7f7-aad1-4487-99a9-79e48ecdbf84","id":"QR_a52bd7f7-aad1-4487-99a9-79e48ecdbf84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:02:15][351272336608344][4643 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-25 10:02:15][351272336608344][4643 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-08-25 10:02:15][351272336608344][4643 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:02:18][354130546961233][0 ms][INFO] === Request start === [2025-08-25 10:02:18][354130546961233][1 ms][DEBUG] START check_scloud [2025-08-25 10:02:18][354130546961233][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:02:18][354130546961233][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 9150 22779 24671216 191608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:02:18][354130546961233][263 ms][DEBUG] targetPkg: running [2025-08-25 10:02:18][354130546961233][263 ms][DEBUG] END check_scloud in 263 ms [2025-08-25 10:02:18][354130546961233][263 ms][DEBUG] START check_boot_completed [2025-08-25 10:02:18][354130546961233][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:02:18][354130546961233][310 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:02:18][354130546961233][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:02:18][354130546961233][357 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:02:18][354130546961233][357 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:02:18][354130546961233][357 ms][DEBUG] START check_internet [2025-08-25 10:02:18][354130546961233][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:02:18][354130546961233][607 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.647/138.647/138.647/0.000 ms\n [2025-08-25 10:02:18][354130546961233][607 ms][DEBUG] check_internet: online [2025-08-25 10:02:18][354130546961233][607 ms][DEBUG] END check_internet in 250 ms [2025-08-25 10:02:18][354130546961233][607 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:02:18][354130546961233][607 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130546961233\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9106\"}'\'' -e'"" [2025-08-25 10:02:18][354130546961233][607 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:02:18][354130546961233][607 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130546961233\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9106\"}'\'' -e'"" [2025-08-25 10:02:22][354130546961233][4700 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e782bfc-f964-40b9-994e-bf6c328e50a6","id":"QR_4e782bfc-f964-40b9-994e-bf6c328e50a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:02:22][354130546961233][4856 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-25 10:02:22][354130546961233][4856 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-25 10:02:22][354130546961233][4856 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:02:25][353628426685633][0 ms][INFO] === Request start === [2025-08-25 10:02:25][353628426685633][1 ms][DEBUG] START check_scloud [2025-08-25 10:02:25][353628426685633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:02:25][353628426685633][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 9150 22779 24828116 202672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:02:25][353628426685633][254 ms][DEBUG] targetPkg: running [2025-08-25 10:02:25][353628426685633][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-25 10:02:25][353628426685633][254 ms][DEBUG] START check_boot_completed [2025-08-25 10:02:25][353628426685633][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:02:25][353628426685633][285 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 10:02:25][353628426685633][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:02:25][353628426685633][332 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:02:25][353628426685633][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 10:02:25][353628426685633][332 ms][DEBUG] START check_internet [2025-08-25 10:02:25][353628426685633][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:02:26][353628426685633][613 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.407/175.407/175.407/0.000 ms\n [2025-08-25 10:02:26][353628426685633][613 ms][DEBUG] check_internet: online [2025-08-25 10:02:26][353628426685633][613 ms][DEBUG] END check_internet in 281 ms [2025-08-25 10:02:26][353628426685633][613 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:02:26][353628426685633][613 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628426685633\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5339\"}'\'' -e'"" [2025-08-25 10:02:26][353628426685633][613 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:02:26][353628426685633][613 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628426685633\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5339\"}'\'' -e'"" [2025-08-25 10:02:29][353628426685633][4362 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 10:02:29][353628426685633][4362 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-25 10:02:29][353628426685633][4362 ms][WARN] Detected error: Process with pid 9150 either refused to load frida-agent, or terminated during injection [2025-08-25 10:02:29][353628426685633][4363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 10:02:29][353628426685633][4518 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 10:02:29][353628426685633][4518 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 10:02:29][353628426685633][4519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 10:02:30][353628426685633][4675 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 10:02:30][353628426685633][4675 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 10:02:30][353628426685633][4878 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 10:02:32][353628426685633][6893 ms][DEBUG] START check_boot_completed [2025-08-25 10:02:32][353628426685633][6893 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:02:32][353628426685633][6940 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:02:32][353628426685633][6940 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:02:32][353628426685633][7002 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:02:32][353628426685633][7002 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 10:02:35][353628426685633][10017 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 10:02:35][353628426685633][10017 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628426685633\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5339\"}'\'' -e'"" [2025-08-25 10:02:39][353628426685633][13626 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98de3bf8-8719-4f2a-8212-8c048f86e776","id":"QR_98de3bf8-8719-4f2a-8212-8c048f86e776","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:02:39][353628426685633][13782 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=3343 [2025-08-25 10:02:39][353628426685633][13782 ms][DEBUG] END runCmdUntilRes#2 in 3765 ms [2025-08-25 10:02:39][353628426685633][13782 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:06:03][351007332461573][1 ms][INFO] === Request start === [2025-08-25 10:06:03][351007332461573][1 ms][DEBUG] START check_scloud [2025-08-25 10:06:03][351007332461573][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:06:04][351007332461573][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 11255 22779 23512192 129772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:06:04][351007332461573][253 ms][DEBUG] targetPkg: running [2025-08-25 10:06:04][351007332461573][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-25 10:06:04][351007332461573][253 ms][DEBUG] START check_boot_completed [2025-08-25 10:06:04][351007332461573][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:06:04][351007332461573][300 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:06:04][351007332461573][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:06:04][351007332461573][394 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 10:06:04][351007332461573][394 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 10:06:04][351007332461573][394 ms][DEBUG] START check_internet [2025-08-25 10:06:04][351007332461573][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:06:04][351007332461573][878 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.785/200.785/200.785/0.000 ms\n [2025-08-25 10:06:04][351007332461573][878 ms][DEBUG] check_internet: online [2025-08-25 10:06:04][351007332461573][878 ms][DEBUG] END check_internet in 484 ms [2025-08-25 10:06:04][351007332461573][878 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:06:04][351007332461573][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007332461573\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4757\"}'\'' -e'"" [2025-08-25 10:06:04][351007332461573][878 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:06:04][351007332461573][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007332461573\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4757\"}'\'' -e'"" [2025-08-25 10:06:08][351007332461573][5111 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e09d811-b23c-41f3-838f-a0fa0eb1ca9e","id":"QR_3e09d811-b23c-41f3-838f-a0fa0eb1ca9e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:06:09][351007332461573][5267 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-25 10:06:09][351007332461573][5267 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-25 10:06:09][351007332461573][5268 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:06:11][352397453017919][0 ms][INFO] === Request start === [2025-08-25 10:06:11][352397453017919][1 ms][DEBUG] START check_scloud [2025-08-25 10:06:11][352397453017919][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:06:11][352397453017919][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 11255 22779 23689480 140872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:06:11][352397453017919][320 ms][DEBUG] targetPkg: running [2025-08-25 10:06:11][352397453017919][320 ms][DEBUG] END check_scloud in 320 ms [2025-08-25 10:06:11][352397453017919][321 ms][DEBUG] START check_boot_completed [2025-08-25 10:06:11][352397453017919][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:06:12][352397453017919][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:06:12][352397453017919][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:06:12][352397453017919][414 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:06:12][352397453017919][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:06:12][352397453017919][414 ms][DEBUG] START check_internet [2025-08-25 10:06:12][352397453017919][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:06:12][352397453017919][696 ms][DEBUG] SU: done in 282 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=179 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 179.394/179.394/179.394/0.000 ms\n [2025-08-25 10:06:12][352397453017919][696 ms][DEBUG] check_internet: online [2025-08-25 10:06:12][352397453017919][696 ms][DEBUG] END check_internet in 282 ms [2025-08-25 10:06:12][352397453017919][696 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:06:12][352397453017919][696 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453017919\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5340\"}'\'' -e'"" [2025-08-25 10:06:12][352397453017919][696 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:06:12][352397453017919][696 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453017919\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5340\"}'\'' -e'"" [2025-08-25 10:06:16][352397453017919][4632 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b407339-2483-4035-b077-5fb82166b569","id":"QR_7b407339-2483-4035-b077-5fb82166b569","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:06:16][352397453017919][4788 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-25 10:06:16][352397453017919][4788 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-25 10:06:16][352397453017919][4788 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:06:18][357262970800871][0 ms][INFO] === Request start === [2025-08-25 10:06:18][357262970800871][1 ms][DEBUG] START check_scloud [2025-08-25 10:06:18][357262970800871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:06:19][357262970800871][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 11255 22779 23825872 152692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:06:19][357262970800871][314 ms][DEBUG] targetPkg: running [2025-08-25 10:06:19][357262970800871][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 10:06:19][357262970800871][314 ms][DEBUG] START check_boot_completed [2025-08-25 10:06:19][357262970800871][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:06:19][357262970800871][359 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 10:06:19][357262970800871][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:06:19][357262970800871][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:06:19][357262970800871][406 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 10:06:19][357262970800871][406 ms][DEBUG] START check_internet [2025-08-25 10:06:19][357262970800871][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:06:19][357262970800871][703 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.346/200.346/200.346/0.000 ms\n [2025-08-25 10:06:19][357262970800871][703 ms][DEBUG] check_internet: online [2025-08-25 10:06:19][357262970800871][703 ms][DEBUG] END check_internet in 297 ms [2025-08-25 10:06:19][357262970800871][703 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:06:19][357262970800871][703 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262970800871\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7608\"}'\'' -e'"" [2025-08-25 10:06:19][357262970800871][703 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:06:19][357262970800871][703 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262970800871\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7608\"}'\'' -e'"" [2025-08-25 10:06:23][357262970800871][4483 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3bd2e0dd-0eb1-49c3-813c-766edc38902a","id":"QR_3bd2e0dd-0eb1-49c3-813c-766edc38902a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:06:23][357262970800871][4639 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-25 10:06:23][357262970800871][4639 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-25 10:06:23][357262970800871][4639 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:08:03][355490899000842][0 ms][INFO] === Request start === [2025-08-25 10:08:03][355490899000842][1 ms][DEBUG] START check_scloud [2025-08-25 10:08:03][355490899000842][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:08:03][355490899000842][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 11255 22779 23951724 163992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:08:03][355490899000842][315 ms][DEBUG] targetPkg: running [2025-08-25 10:08:03][355490899000842][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 10:08:03][355490899000842][316 ms][DEBUG] START check_boot_completed [2025-08-25 10:08:03][355490899000842][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:08:03][355490899000842][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:08:03][355490899000842][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:08:03][355490899000842][456 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 10:08:03][355490899000842][456 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 10:08:03][355490899000842][456 ms][DEBUG] START check_internet [2025-08-25 10:08:03][355490899000842][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:08:04][355490899000842][753 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.585/187.585/187.585/0.000 ms\n [2025-08-25 10:08:04][355490899000842][753 ms][DEBUG] check_internet: online [2025-08-25 10:08:04][355490899000842][753 ms][DEBUG] END check_internet in 297 ms [2025-08-25 10:08:04][355490899000842][753 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:08:04][355490899000842][753 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490899000842\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7295\"}'\'' -e'"" [2025-08-25 10:08:04][355490899000842][753 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:08:04][355490899000842][753 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490899000842\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7295\"}'\'' -e'"" [2025-08-25 10:08:08][355490899000842][4955 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c038a62-aca3-435a-97d0-6125cc46f252","id":"QR_3c038a62-aca3-435a-97d0-6125cc46f252","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:08:08][355490899000842][5111 ms][DEBUG] proc_open done in 4357 ms; code=255; res.len=3343 [2025-08-25 10:08:08][355490899000842][5111 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-25 10:08:08][355490899000842][5111 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:08:11][354690578758427][1 ms][INFO] === Request start === [2025-08-25 10:08:11][354690578758427][1 ms][DEBUG] START check_scloud [2025-08-25 10:08:11][354690578758427][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:08:11][354690578758427][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 11255 22779 24108532 174760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:08:11][354690578758427][259 ms][DEBUG] targetPkg: running [2025-08-25 10:08:11][354690578758427][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-25 10:08:11][354690578758427][259 ms][DEBUG] START check_boot_completed [2025-08-25 10:08:11][354690578758427][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:08:11][354690578758427][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:08:11][354690578758427][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:08:11][354690578758427][369 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:08:11][354690578758427][369 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:08:11][354690578758427][369 ms][DEBUG] START check_internet [2025-08-25 10:08:11][354690578758427][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:08:11][354690578758427][728 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.504/225.504/225.504/0.000 ms\n [2025-08-25 10:08:11][354690578758427][728 ms][DEBUG] check_internet: online [2025-08-25 10:08:11][354690578758427][728 ms][DEBUG] END check_internet in 359 ms [2025-08-25 10:08:11][354690578758427][728 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:08:11][354690578758427][728 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690578758427\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4841\"}'\'' -e'"" [2025-08-25 10:08:11][354690578758427][728 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:08:11][354690578758427][728 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690578758427\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4841\"}'\'' -e'"" [2025-08-25 10:08:15][354690578758427][4555 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_791d3b05-6594-4bcb-8f7b-fd87e86a3a5b","id":"QR_791d3b05-6594-4bcb-8f7b-fd87e86a3a5b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:08:15][354690578758427][4711 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-25 10:08:15][354690578758427][4711 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 10:08:15][354690578758427][4711 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:08:18][350482802807343][0 ms][INFO] === Request start === [2025-08-25 10:08:18][350482802807343][1 ms][DEBUG] START check_scloud [2025-08-25 10:08:18][350482802807343][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:08:18][350482802807343][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 11255 22779 24289980 186552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:08:18][350482802807343][271 ms][DEBUG] targetPkg: running [2025-08-25 10:08:18][350482802807343][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-25 10:08:18][350482802807343][271 ms][DEBUG] START check_boot_completed [2025-08-25 10:08:18][350482802807343][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:08:18][350482802807343][318 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:08:18][350482802807343][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:08:18][350482802807343][411 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 10:08:18][350482802807343][412 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 10:08:18][350482802807343][412 ms][DEBUG] START check_internet [2025-08-25 10:08:18][350482802807343][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:08:18][350482802807343][693 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=155 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 155.445/155.445/155.445/0.000 ms\n [2025-08-25 10:08:18][350482802807343][693 ms][DEBUG] check_internet: online [2025-08-25 10:08:18][350482802807343][693 ms][DEBUG] END check_internet in 281 ms [2025-08-25 10:08:18][350482802807343][693 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:08:18][350482802807343][693 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482802807343\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5582\"}'\'' -e'"" [2025-08-25 10:08:18][350482802807343][693 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:08:18][350482802807343][693 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482802807343\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5582\"}'\'' -e'"" [2025-08-25 10:08:22][350482802807343][4473 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_660c89ec-09c0-483f-bc3d-d87cf836332b","id":"QR_660c89ec-09c0-483f-bc3d-d87cf836332b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:08:22][350482802807343][4629 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-25 10:08:22][350482802807343][4629 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-25 10:08:22][350482802807343][4629 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:08:25][351856228887709][0 ms][INFO] === Request start === [2025-08-25 10:08:25][351856228887709][1 ms][DEBUG] START check_scloud [2025-08-25 10:08:25][351856228887709][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:08:25][351856228887709][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 11255 22779 24446880 197576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:08:25][351856228887709][289 ms][DEBUG] targetPkg: running [2025-08-25 10:08:25][351856228887709][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-25 10:08:25][351856228887709][289 ms][DEBUG] START check_boot_completed [2025-08-25 10:08:25][351856228887709][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:08:25][351856228887709][335 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:08:25][351856228887709][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:08:25][351856228887709][398 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:08:25][351856228887709][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:08:25][351856228887709][398 ms][DEBUG] START check_internet [2025-08-25 10:08:25][351856228887709][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:08:25][351856228887709][632 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.371/136.371/136.371/0.000 ms\n [2025-08-25 10:08:25][351856228887709][632 ms][DEBUG] check_internet: online [2025-08-25 10:08:25][351856228887709][632 ms][DEBUG] END check_internet in 234 ms [2025-08-25 10:08:25][351856228887709][632 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:08:25][351856228887709][633 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351856228887709\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7988\"}'\'' -e'"" [2025-08-25 10:08:25][351856228887709][633 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:08:25][351856228887709][633 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351856228887709\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7988\"}'\'' -e'"" [2025-08-25 10:08:29][351856228887709][4522 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d8894cc-a4c8-46b7-9ceb-6217e09262c1","id":"QR_3d8894cc-a4c8-46b7-9ceb-6217e09262c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:08:29][351856228887709][4678 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-25 10:08:29][351856228887709][4678 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-25 10:08:29][351856228887709][4678 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:09:03][355680659611529][1 ms][INFO] === Request start === [2025-08-25 10:09:03][355680659611529][1 ms][DEBUG] START check_scloud [2025-08-25 10:09:03][355680659611529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:09:04][355680659611529][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 11255 22779 24527932 210092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:09:04][355680659611529][289 ms][DEBUG] targetPkg: running [2025-08-25 10:09:04][355680659611529][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-25 10:09:04][355680659611529][289 ms][DEBUG] START check_boot_completed [2025-08-25 10:09:04][355680659611529][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:09:04][355680659611529][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:09:04][355680659611529][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:09:04][355680659611529][398 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 10:09:04][355680659611529][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:09:04][355680659611529][399 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:09:04][355680659611529][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680659611529\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2805\"}'\'' -e'"" [2025-08-25 10:09:04][355680659611529][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:09:04][355680659611529][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680659611529\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2805\"}'\'' -e'"" [2025-08-25 10:09:08][355680659611529][4319 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be4ae8fb-7601-4c52-8343-eb89d91fe807","id":"QR_be4ae8fb-7601-4c52-8343-eb89d91fe807","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:09:08][355680659611529][4475 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-25 10:09:08][355680659611529][4475 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-25 10:09:08][355680659611529][4476 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:09:10][356356730652589][0 ms][INFO] === Request start === [2025-08-25 10:09:10][356356730652589][1 ms][DEBUG] START check_scloud [2025-08-25 10:09:10][356356730652589][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:09:11][356356730652589][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 11255 22779 24656196 220804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:09:11][356356730652589][280 ms][DEBUG] targetPkg: running [2025-08-25 10:09:11][356356730652589][280 ms][DEBUG] END check_scloud in 280 ms [2025-08-25 10:09:11][356356730652589][280 ms][DEBUG] START check_boot_completed [2025-08-25 10:09:11][356356730652589][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:09:11][356356730652589][327 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:09:11][356356730652589][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:09:11][356356730652589][390 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:09:11][356356730652589][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:09:11][356356730652589][390 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:09:11][356356730652589][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356730652589\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2427\"}'\'' -e'"" [2025-08-25 10:09:11][356356730652589][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:09:11][356356730652589][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356730652589\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2427\"}'\'' -e'"" [2025-08-25 10:09:20][356356730652589][9465 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d5e6932-894a-4a04-9311-53b5de4b4095","id":"QR_9d5e6932-894a-4a04-9311-53b5de4b4095","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:09:20][356356730652589][9622 ms][DEBUG] proc_open done in 9232 ms; code=255; res.len=3343 [2025-08-25 10:09:20][356356730652589][9622 ms][DEBUG] END runCmdUntilRes#1 in 9232 ms [2025-08-25 10:09:20][356356730652589][9622 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:11:03][356816561947804][1 ms][INFO] === Request start === [2025-08-25 10:11:03][356816561947804][1 ms][DEBUG] START check_scloud [2025-08-25 10:11:03][356816561947804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:11:04][356816561947804][326 ms][DEBUG] SU: done in 324 ms; outu0_a118 11255 22779 24743428 232684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:11:04][356816561947804][326 ms][DEBUG] targetPkg: running [2025-08-25 10:11:04][356816561947804][326 ms][DEBUG] END check_scloud in 325 ms [2025-08-25 10:11:04][356816561947804][326 ms][DEBUG] START check_boot_completed [2025-08-25 10:11:04][356816561947804][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:11:04][356816561947804][372 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:11:04][356816561947804][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:11:04][356816561947804][419 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:11:04][356816561947804][419 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:11:04][356816561947804][419 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:11:04][356816561947804][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356816561947804\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5999\"}'\'' -e'"" [2025-08-25 10:11:04][356816561947804][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:11:04][356816561947804][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356816561947804\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5999\"}'\'' -e'"" [2025-08-25 10:11:08][356816561947804][4574 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c364400b-aba7-449e-84d8-7e7d7c28fb17","id":"QR_c364400b-aba7-449e-84d8-7e7d7c28fb17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:11:08][356816561947804][4731 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 10:11:08][356816561947804][4731 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 10:11:08][356816561947804][4731 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:11:11][354668776989267][0 ms][INFO] === Request start === [2025-08-25 10:11:11][354668776989267][1 ms][DEBUG] START check_scloud [2025-08-25 10:11:11][354668776989267][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:11:11][354668776989267][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 11255 22779 24920720 244392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:11:11][354668776989267][262 ms][DEBUG] targetPkg: running [2025-08-25 10:11:11][354668776989267][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-25 10:11:11][354668776989267][262 ms][DEBUG] START check_boot_completed [2025-08-25 10:11:11][354668776989267][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:11:11][354668776989267][309 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:11:11][354668776989267][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:11:11][354668776989267][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:11:11][354668776989267][356 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:11:11][354668776989267][356 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:11:11][354668776989267][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354668776989267\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2352\"}'\'' -e'"" [2025-08-25 10:11:11][354668776989267][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:11:11][354668776989267][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354668776989267\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2352\"}'\'' -e'"" [2025-08-25 10:11:15][354668776989267][4058 ms][DEBUG] proc_open done in 3702 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 10:11:15][354668776989267][4058 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-25 10:11:15][354668776989267][4058 ms][WARN] Detected error: Process with pid 11255 either refused to load frida-agent, or terminated during injection [2025-08-25 10:11:15][354668776989267][4058 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 10:11:15][354668776989267][4200 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 10:11:15][354668776989267][4200 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 10:11:15][354668776989267][4200 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 10:11:15][354668776989267][4355 ms][DEBUG] SU: done in 155 ms; out [2025-08-25 10:11:15][354668776989267][4355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 10:11:15][354668776989267][4495 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 10:11:17][354668776989267][6510 ms][DEBUG] START check_boot_completed [2025-08-25 10:11:17][354668776989267][6510 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:11:17][354668776989267][6557 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:11:17][354668776989267][6557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:11:17][354668776989267][6604 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:11:17][354668776989267][6604 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:11:20][354668776989267][9619 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 10:11:20][354668776989267][9619 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354668776989267\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2352\"}'\'' -e'"" [2025-08-25 10:11:24][354668776989267][13306 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38d0bb5d-1c30-456f-892d-c996aac51d20","id":"QR_38d0bb5d-1c30-456f-892d-c996aac51d20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:11:24][354668776989267][13462 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-25 10:11:24][354668776989267][13462 ms][DEBUG] END runCmdUntilRes#2 in 3843 ms [2025-08-25 10:11:24][354668776989267][13462 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:15:03][354550809435841][1 ms][INFO] === Request start === [2025-08-25 10:15:03][354550809435841][1 ms][DEBUG] START check_scloud [2025-08-25 10:15:03][354550809435841][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:15:04][354550809435841][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 12756 22779 23462984 129548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:15:04][354550809435841][305 ms][DEBUG] targetPkg: running [2025-08-25 10:15:04][354550809435841][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 10:15:04][354550809435841][305 ms][DEBUG] START check_boot_completed [2025-08-25 10:15:04][354550809435841][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:15:04][354550809435841][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 10:15:04][354550809435841][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:15:04][354550809435841][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:15:04][354550809435841][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 10:15:04][354550809435841][383 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:15:04][354550809435841][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354550809435841\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9178\"}'\'' -e'"" [2025-08-25 10:15:04][354550809435841][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:15:04][354550809435841][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354550809435841\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9178\"}'\'' -e'"" [2025-08-25 10:15:08][354550809435841][4570 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c4b1bda-5293-4857-b9de-d4f45ddfaf0f","id":"QR_9c4b1bda-5293-4857-b9de-d4f45ddfaf0f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:15:08][354550809435841][4726 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3343 [2025-08-25 10:15:08][354550809435841][4726 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-25 10:15:08][354550809435841][4727 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:16:03][351240643328609][0 ms][INFO] === Request start === [2025-08-25 10:16:03][351240643328609][1 ms][DEBUG] START check_scloud [2025-08-25 10:16:03][351240643328609][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:16:03][351240643328609][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 12756 22779 23643336 140708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:16:03][351240643328609][257 ms][DEBUG] targetPkg: running [2025-08-25 10:16:03][351240643328609][257 ms][DEBUG] END check_scloud in 257 ms [2025-08-25 10:16:03][351240643328609][258 ms][DEBUG] START check_boot_completed [2025-08-25 10:16:03][351240643328609][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:16:03][351240643328609][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:16:03][351240643328609][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:16:03][351240643328609][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:16:03][351240643328609][352 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:16:03][351240643328609][352 ms][DEBUG] START check_internet [2025-08-25 10:16:03][351240643328609][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:16:04][351240643328609][929 ms][DEBUG] SU: done in 577 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.087/201.087/201.087/0.000 ms\n [2025-08-25 10:16:04][351240643328609][929 ms][DEBUG] check_internet: online [2025-08-25 10:16:04][351240643328609][929 ms][DEBUG] END check_internet in 577 ms [2025-08-25 10:16:04][351240643328609][929 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:16:04][351240643328609][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643328609\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2731\"}'\'' -e'"" [2025-08-25 10:16:04][351240643328609][929 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:16:04][351240643328609][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643328609\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2731\"}'\'' -e'"" [2025-08-25 10:16:08][351240643328609][5053 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ec5362d-2396-478c-b9cb-cbef1dd89b60","id":"QR_8ec5362d-2396-478c-b9cb-cbef1dd89b60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:16:08][351240643328609][5209 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-25 10:16:08][351240643328609][5209 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-25 10:16:08][351240643328609][5209 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:16:11][353684140320213][0 ms][INFO] === Request start === [2025-08-25 10:16:11][353684140320213][1 ms][DEBUG] START check_scloud [2025-08-25 10:16:11][353684140320213][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:16:11][353684140320213][255 ms][DEBUG] SU: done in 255 ms; outu0_a118 12756 22779 23818512 152436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:16:11][353684140320213][255 ms][DEBUG] targetPkg: running [2025-08-25 10:16:11][353684140320213][255 ms][DEBUG] END check_scloud in 255 ms [2025-08-25 10:16:11][353684140320213][255 ms][DEBUG] START check_boot_completed [2025-08-25 10:16:11][353684140320213][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:16:11][353684140320213][287 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 10:16:11][353684140320213][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:16:11][353684140320213][334 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:16:11][353684140320213][334 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 10:16:11][353684140320213][334 ms][DEBUG] START check_internet [2025-08-25 10:16:11][353684140320213][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:16:11][353684140320213][662 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.366/214.366/214.366/0.000 ms\n [2025-08-25 10:16:11][353684140320213][662 ms][DEBUG] check_internet: online [2025-08-25 10:16:11][353684140320213][662 ms][DEBUG] END check_internet in 328 ms [2025-08-25 10:16:11][353684140320213][662 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:16:11][353684140320213][662 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140320213\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9669\"}'\'' -e'"" [2025-08-25 10:16:11][353684140320213][662 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:16:11][353684140320213][662 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140320213\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9669\"}'\'' -e'"" [2025-08-25 10:16:15][353684140320213][4739 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e38f90c-cc26-4846-88c9-fc248dd72492","id":"QR_3e38f90c-cc26-4846-88c9-fc248dd72492","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:16:16][353684140320213][4895 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 10:16:16][353684140320213][4895 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 10:16:16][353684140320213][4895 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:20:03][351397294169961][1 ms][INFO] === Request start === [2025-08-25 10:20:03][351397294169961][1 ms][DEBUG] START check_scloud [2025-08-25 10:20:03][351397294169961][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:20:03][351397294169961][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 12756 22779 23924048 163764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:20:03][351397294169961][282 ms][DEBUG] targetPkg: running [2025-08-25 10:20:03][351397294169961][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-25 10:20:03][351397294169961][282 ms][DEBUG] START check_boot_completed [2025-08-25 10:20:03][351397294169961][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:20:04][351397294169961][313 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 10:20:04][351397294169961][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:20:04][351397294169961][376 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:20:04][351397294169961][376 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:20:04][351397294169961][376 ms][DEBUG] START check_internet [2025-08-25 10:20:04][351397294169961][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:20:04][351397294169961][877 ms][DEBUG] SU: done in 501 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.632/200.632/200.632/0.000 ms\n [2025-08-25 10:20:04][351397294169961][877 ms][DEBUG] check_internet: online [2025-08-25 10:20:04][351397294169961][878 ms][DEBUG] END check_internet in 502 ms [2025-08-25 10:20:04][351397294169961][878 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:20:04][351397294169961][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351397294169961\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3155\"}'\'' -e'"" [2025-08-25 10:20:04][351397294169961][878 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:20:04][351397294169961][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351397294169961\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3155\"}'\'' -e'"" [2025-08-25 10:20:08][351397294169961][4937 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52ea104e-6f25-4070-8d9e-aacd7b13cf30","id":"QR_52ea104e-6f25-4070-8d9e-aacd7b13cf30","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:20:08][351397294169961][5094 ms][DEBUG] proc_open done in 4216 ms; code=255; res.len=3343 [2025-08-25 10:20:08][351397294169961][5094 ms][DEBUG] END runCmdUntilRes#1 in 4216 ms [2025-08-25 10:20:08][351397294169961][5094 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:24:03][352375452122435][1 ms][INFO] === Request start === [2025-08-25 10:24:03][352375452122435][1 ms][DEBUG] START check_scloud [2025-08-25 10:24:03][352375452122435][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:24:03][352375452122435][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 12756 22779 24035892 174836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:24:03][352375452122435][278 ms][DEBUG] targetPkg: running [2025-08-25 10:24:03][352375452122435][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-25 10:24:03][352375452122435][278 ms][DEBUG] START check_boot_completed [2025-08-25 10:24:03][352375452122435][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:24:03][352375452122435][309 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 10:24:03][352375452122435][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:24:03][352375452122435][357 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 10:24:03][352375452122435][357 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 10:24:03][352375452122435][357 ms][DEBUG] START check_internet [2025-08-25 10:24:03][352375452122435][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:24:03][352375452122435][856 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.716/201.716/201.716/0.000 ms\n [2025-08-25 10:24:03][352375452122435][856 ms][DEBUG] check_internet: online [2025-08-25 10:24:03][352375452122435][856 ms][DEBUG] END check_internet in 499 ms [2025-08-25 10:24:03][352375452122435][856 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:24:04][352375452122435][856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352375452122435\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5998\"}'\'' -e'"" [2025-08-25 10:24:04][352375452122435][856 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:24:04][352375452122435][856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352375452122435\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5998\"}'\'' -e'"" [2025-08-25 10:24:08][352375452122435][5027 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fcb4bc29-e0e9-409e-864c-d30c0f55a465","id":"QR_fcb4bc29-e0e9-409e-864c-d30c0f55a465","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:24:08][352375452122435][5183 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-25 10:24:08][352375452122435][5183 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-25 10:24:08][352375452122435][5183 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:25:03][355622366329466][1 ms][INFO] === Request start === [2025-08-25 10:25:03][355622366329466][1 ms][DEBUG] START check_scloud [2025-08-25 10:25:03][355622366329466][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:25:03][355622366329466][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 12756 22779 24143576 186788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:25:03][355622366329466][313 ms][DEBUG] targetPkg: running [2025-08-25 10:25:03][355622366329466][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 10:25:03][355622366329466][313 ms][DEBUG] START check_boot_completed [2025-08-25 10:25:03][355622366329466][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:25:03][355622366329466][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:25:03][355622366329466][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:25:03][355622366329466][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:25:03][355622366329466][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:25:03][355622366329466][422 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:25:03][355622366329466][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355622366329466\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3231\"}'\'' -e'"" [2025-08-25 10:25:03][355622366329466][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:25:03][355622366329466][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355622366329466\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3231\"}'\'' -e'"" [2025-08-25 10:25:07][355622366329466][4577 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26710e00-dbf6-47f2-8f6a-2a4126440cee","id":"QR_26710e00-dbf6-47f2-8f6a-2a4126440cee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:25:07][355622366329466][4733 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 10:25:07][355622366329466][4733 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 10:25:07][355622366329466][4733 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:25:10][351031123017006][0 ms][INFO] === Request start === [2025-08-25 10:25:10][351031123017006][1 ms][DEBUG] START check_scloud [2025-08-25 10:25:10][351031123017006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:25:10][351031123017006][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 12756 22779 24267744 197748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:25:10][351031123017006][306 ms][DEBUG] targetPkg: running [2025-08-25 10:25:10][351031123017006][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 10:25:10][351031123017006][306 ms][DEBUG] START check_boot_completed [2025-08-25 10:25:10][351031123017006][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:25:10][351031123017006][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:25:10][351031123017006][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:25:10][351031123017006][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:25:10][351031123017006][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:25:10][351031123017006][400 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:25:10][351031123017006][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031123017006\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3157\"}'\'' -e'"" [2025-08-25 10:25:10][351031123017006][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:25:10][351031123017006][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031123017006\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3157\"}'\'' -e'"" [2025-08-25 10:25:15][351031123017006][4648 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_286d3cdc-e86c-44cf-a82c-37fd4d93afce","id":"QR_286d3cdc-e86c-44cf-a82c-37fd4d93afce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:25:15][351031123017006][4804 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3343 [2025-08-25 10:25:15][351031123017006][4804 ms][DEBUG] END runCmdUntilRes#1 in 4404 ms [2025-08-25 10:25:15][351031123017006][4804 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:26:02][355382703523509][0 ms][INFO] === Request start === [2025-08-25 10:26:02][355382703523509][1 ms][DEBUG] START check_scloud [2025-08-25 10:26:02][355382703523509][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:26:03][355382703523509][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 12756 22779 24412320 210124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:26:03][355382703523509][278 ms][DEBUG] targetPkg: running [2025-08-25 10:26:03][355382703523509][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-25 10:26:03][355382703523509][278 ms][DEBUG] START check_boot_completed [2025-08-25 10:26:03][355382703523509][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:26:03][355382703523509][325 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:26:03][355382703523509][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:26:03][355382703523509][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:26:03][355382703523509][372 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:26:03][355382703523509][372 ms][DEBUG] START check_internet [2025-08-25 10:26:03][355382703523509][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:26:03][355382703523509][715 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.456/239.456/239.456/0.000 ms\n [2025-08-25 10:26:03][355382703523509][715 ms][DEBUG] check_internet: online [2025-08-25 10:26:03][355382703523509][715 ms][DEBUG] END check_internet in 343 ms [2025-08-25 10:26:03][355382703523509][715 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:26:03][355382703523509][715 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382703523509\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7503\"}'\'' -e'"" [2025-08-25 10:26:03][355382703523509][715 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:26:03][355382703523509][715 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382703523509\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7503\"}'\'' -e'"" [2025-08-25 10:26:07][355382703523509][4808 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d294a73a-338d-4189-9d23-52cee0e0d6e6","id":"QR_d294a73a-338d-4189-9d23-52cee0e0d6e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:26:07][355382703523509][4964 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-25 10:26:07][355382703523509][4964 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-25 10:26:07][355382703523509][4964 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:28:03][350178737921320][1 ms][INFO] === Request start === [2025-08-25 10:28:03][350178737921320][1 ms][DEBUG] START check_scloud [2025-08-25 10:28:03][350178737921320][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:28:03][350178737921320][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 12756 22779 24554756 220868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:28:03][350178737921320][307 ms][DEBUG] targetPkg: running [2025-08-25 10:28:03][350178737921320][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 10:28:03][350178737921320][307 ms][DEBUG] START check_boot_completed [2025-08-25 10:28:03][350178737921320][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:28:03][350178737921320][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:28:03][350178737921320][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:28:04][350178737921320][402 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 10:28:04][350178737921320][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 10:28:04][350178737921320][402 ms][DEBUG] START check_internet [2025-08-25 10:28:04][350178737921320][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:28:04][350178737921320][728 ms][DEBUG] SU: done in 326 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.472/196.472/196.472/0.000 ms\n [2025-08-25 10:28:04][350178737921320][728 ms][DEBUG] check_internet: online [2025-08-25 10:28:04][350178737921320][728 ms][DEBUG] END check_internet in 326 ms [2025-08-25 10:28:04][350178737921320][728 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:28:04][350178737921320][728 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178737921320\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2985\"}'\'' -e'"" [2025-08-25 10:28:04][350178737921320][728 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:28:04][350178737921320][728 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178737921320\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2985\"}'\'' -e'"" [2025-08-25 10:28:13][350178737921320][9648 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d59e48ed-d55a-46a6-9759-cb08e34a3465","id":"QR_d59e48ed-d55a-46a6-9759-cb08e34a3465","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:28:13][350178737921320][9804 ms][DEBUG] proc_open done in 9075 ms; code=255; res.len=3343 [2025-08-25 10:28:13][350178737921320][9804 ms][DEBUG] END runCmdUntilRes#1 in 9076 ms [2025-08-25 10:28:13][350178737921320][9804 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:29:03][352133645702393][0 ms][INFO] === Request start === [2025-08-25 10:29:03][352133645702393][1 ms][DEBUG] START check_scloud [2025-08-25 10:29:03][352133645702393][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:29:03][352133645702393][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 12756 22779 24678760 232484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:29:03][352133645702393][258 ms][DEBUG] targetPkg: running [2025-08-25 10:29:03][352133645702393][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-25 10:29:03][352133645702393][258 ms][DEBUG] START check_boot_completed [2025-08-25 10:29:03][352133645702393][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:29:04][352133645702393][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:29:04][352133645702393][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:29:04][352133645702393][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:29:04][352133645702393][351 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:29:04][352133645702393][351 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:29:04][352133645702393][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133645702393\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3138\"}'\'' -e'"" [2025-08-25 10:29:04][352133645702393][352 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:29:04][352133645702393][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133645702393\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3138\"}'\'' -e'"" [2025-08-25 10:29:08][352133645702393][4412 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b80d0ca9-00ee-4eca-a6da-e6e80f346623","id":"QR_b80d0ca9-00ee-4eca-a6da-e6e80f346623","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:29:08][352133645702393][4569 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-25 10:29:08][352133645702393][4569 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-25 10:29:08][352133645702393][4569 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:29:36][353548758555891][0 ms][INFO] === Request start === [2025-08-25 10:29:36][353548758555891][1 ms][DEBUG] START check_scloud [2025-08-25 10:29:36][353548758555891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:29:37][353548758555891][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 12756 22779 24788624 243540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:29:37][353548758555891][306 ms][DEBUG] targetPkg: running [2025-08-25 10:29:37][353548758555891][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 10:29:37][353548758555891][306 ms][DEBUG] START check_boot_completed [2025-08-25 10:29:37][353548758555891][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:29:37][353548758555891][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:29:37][353548758555891][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:29:37][353548758555891][416 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 10:29:37][353548758555891][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:29:37][353548758555891][416 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:29:37][353548758555891][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548758555891\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2226\"}'\'' -e'"" [2025-08-25 10:29:37][353548758555891][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:29:37][353548758555891][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548758555891\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2226\"}'\'' -e'"" [2025-08-25 10:29:41][353548758555891][4211 ms][DEBUG] proc_open done in 3795 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 10:29:41][353548758555891][4211 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-08-25 10:29:41][353548758555891][4211 ms][WARN] Detected error: Process with pid 12756 either refused to load frida-agent, or terminated during injection [2025-08-25 10:29:41][353548758555891][4211 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 10:29:41][353548758555891][4337 ms][DEBUG] SU: done in 126 ms; out [2025-08-25 10:29:41][353548758555891][4338 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 10:29:41][353548758555891][4338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 10:29:41][353548758555891][4461 ms][DEBUG] SU: done in 124 ms; out [2025-08-25 10:29:41][353548758555891][4462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 10:29:41][353548758555891][4634 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 10:29:43][353548758555891][6648 ms][DEBUG] START check_boot_completed [2025-08-25 10:29:43][353548758555891][6648 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:29:43][353548758555891][6695 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:29:43][353548758555891][6695 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:29:43][353548758555891][6758 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:29:43][353548758555891][6758 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 10:29:46][353548758555891][9773 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 10:29:46][353548758555891][9773 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548758555891\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2226\"}'\'' -e'"" [2025-08-25 10:29:50][353548758555891][13412 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 10:29:50][353548758555891][13569 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=107 [2025-08-25 10:29:50][353548758555891][13569 ms][DEBUG] END runCmdUntilRes#2 in 3796 ms [2025-08-25 10:29:50][353548758555891][13569 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 10:29:50][][0 ms][INFO] === Request start === [2025-08-25 10:29:50][][1 ms][DEBUG] START check_scloud [2025-08-25 10:29:50][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:29:51][][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 14624 22779 23540280 126256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:29:51][][264 ms][DEBUG] targetPkg: running [2025-08-25 10:29:51][][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-25 10:29:51][][264 ms][DEBUG] START check_boot_completed [2025-08-25 10:29:51][][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:29:51][][311 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:29:51][][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:29:51][][373 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:29:51][][373 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:29:51][][373 ms][DEBUG] rawBody.length=1129 [2025-08-25 10:29:51][][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB0Y8GCF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9791\"}'\'' -e'"" [2025-08-25 10:29:51][][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:29:51][][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB0Y8GCF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9791\"}'\'' -e'"" [2025-08-25 10:29:54][][3950 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 10:29:54][][4106 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=107 [2025-08-25 10:29:54][][4107 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-25 10:29:54][][4107 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 10:29:57][353548758555891][0 ms][INFO] === Request start === [2025-08-25 10:29:57][353548758555891][1 ms][DEBUG] START check_scloud [2025-08-25 10:29:57][353548758555891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:29:57][353548758555891][240 ms][DEBUG] SU: done in 239 ms; outu0_a118 14624 22779 23662400 137468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:29:57][353548758555891][240 ms][DEBUG] targetPkg: running [2025-08-25 10:29:57][353548758555891][240 ms][DEBUG] END check_scloud in 240 ms [2025-08-25 10:29:57][353548758555891][240 ms][DEBUG] START check_boot_completed [2025-08-25 10:29:57][353548758555891][240 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:29:57][353548758555891][286 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:29:57][353548758555891][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:29:57][353548758555891][333 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:29:57][353548758555891][333 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:29:57][353548758555891][333 ms][DEBUG] rawBody.length=1149 [2025-08-25 10:29:57][353548758555891][333 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548758555891\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4765\"}'\'' -e'"" [2025-08-25 10:29:57][353548758555891][333 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:29:57][353548758555891][333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548758555891\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4765\"}'\'' -e'"" [2025-08-25 10:30:04][353548758555891][7191 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14785dff-7512-47a4-bd1c-f35f94250cb6","id":"QR_14785dff-7512-47a4-bd1c-f35f94250cb6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:30:04][353548758555891][7347 ms][DEBUG] proc_open done in 7014 ms; code=255; res.len=3343 [2025-08-25 10:30:04][353548758555891][7347 ms][DEBUG] END runCmdUntilRes#1 in 7014 ms [2025-08-25 10:30:04][353548758555891][7347 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:30:29][353548758555891][1 ms][INFO] === Request start === [2025-08-25 10:30:29][353548758555891][1 ms][DEBUG] START check_scloud [2025-08-25 10:30:29][353548758555891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:30:29][353548758555891][325 ms][DEBUG] SU: done in 323 ms; outu0_a118 14624 22779 23711224 151688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:30:29][353548758555891][325 ms][DEBUG] targetPkg: running [2025-08-25 10:30:29][353548758555891][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-25 10:30:29][353548758555891][325 ms][DEBUG] START check_boot_completed [2025-08-25 10:30:29][353548758555891][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:30:30][353548758555891][371 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:30:30][353548758555891][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:30:30][353548758555891][418 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:30:30][353548758555891][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:30:30][353548758555891][418 ms][DEBUG] START check_internet [2025-08-25 10:30:30][353548758555891][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:30:30][353548758555891][824 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.009/203.009/203.009/0.000 ms\n [2025-08-25 10:30:30][353548758555891][825 ms][DEBUG] check_internet: online [2025-08-25 10:30:30][353548758555891][825 ms][DEBUG] END check_internet in 406 ms [2025-08-25 10:30:30][353548758555891][825 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:30:30][353548758555891][825 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548758555891\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8996\"}'\'' -e'"" [2025-08-25 10:30:30][353548758555891][825 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:30:30][353548758555891][825 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548758555891\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8996\"}'\'' -e'"" [2025-08-25 10:30:33][353548758555891][4245 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 10:30:34][353548758555891][4402 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=107 [2025-08-25 10:30:34][353548758555891][4402 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-25 10:30:34][353548758555891][4402 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 10:30:34][][0 ms][INFO] === Request start === [2025-08-25 10:30:34][][1 ms][DEBUG] START check_scloud [2025-08-25 10:30:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:30:34][][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 14624 22779 23882496 162556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:30:34][][311 ms][DEBUG] targetPkg: running [2025-08-25 10:30:34][][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 10:30:34][][312 ms][DEBUG] START check_boot_completed [2025-08-25 10:30:34][][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:30:34][][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:30:34][][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:30:34][][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:30:34][][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:30:34][][421 ms][DEBUG] START check_internet [2025-08-25 10:30:34][][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:30:35][][671 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.632/141.632/141.632/0.000 ms\n [2025-08-25 10:30:35][][671 ms][DEBUG] check_internet: online [2025-08-25 10:30:35][][671 ms][DEBUG] END check_internet in 251 ms [2025-08-25 10:30:35][][671 ms][DEBUG] rawBody.length=1129 [2025-08-25 10:30:35][][671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB0Y8GCF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6666\"}'\'' -e'"" [2025-08-25 10:30:35][][671 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:30:35][][671 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB0Y8GCF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6666\"}'\'' -e'"" [2025-08-25 10:30:38][][4326 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 10:30:38][][4482 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=107 [2025-08-25 10:30:38][][4482 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-25 10:30:38][][4482 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 10:30:41][353548758555891][0 ms][INFO] === Request start === [2025-08-25 10:30:41][353548758555891][1 ms][DEBUG] START check_scloud [2025-08-25 10:30:41][353548758555891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:30:41][353548758555891][267 ms][DEBUG] SU: done in 267 ms; outu0_a118 14624 22779 24041352 174352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:30:41][353548758555891][267 ms][DEBUG] targetPkg: running [2025-08-25 10:30:41][353548758555891][267 ms][DEBUG] END check_scloud in 267 ms [2025-08-25 10:30:41][353548758555891][267 ms][DEBUG] START check_boot_completed [2025-08-25 10:30:41][353548758555891][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:30:41][353548758555891][314 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:30:41][353548758555891][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:30:41][353548758555891][377 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:30:41][353548758555891][377 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:30:41][353548758555891][377 ms][DEBUG] START check_internet [2025-08-25 10:30:41][353548758555891][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:30:41][353548758555891][627 ms][DEBUG] SU: done in 251 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=152 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 152.600/152.600/152.600/0.000 ms\n [2025-08-25 10:30:41][353548758555891][628 ms][DEBUG] check_internet: online [2025-08-25 10:30:41][353548758555891][628 ms][DEBUG] END check_internet in 251 ms [2025-08-25 10:30:41][353548758555891][628 ms][DEBUG] rawBody.length=1149 [2025-08-25 10:30:41][353548758555891][628 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548758555891\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2725\"}'\'' -e'"" [2025-08-25 10:30:41][353548758555891][628 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:30:41][353548758555891][628 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548758555891\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2725\"}'\'' -e'"" [2025-08-25 10:30:45][353548758555891][4657 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc3ee85f-3471-46e7-a14f-24703f433fed","id":"QR_bc3ee85f-3471-46e7-a14f-24703f433fed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:30:46][353548758555891][4813 ms][DEBUG] proc_open done in 4185 ms; code=255; res.len=3343 [2025-08-25 10:30:46][353548758555891][4813 ms][DEBUG] END runCmdUntilRes#1 in 4185 ms [2025-08-25 10:30:46][353548758555891][4813 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:31:03][351240641620445][0 ms][INFO] === Request start === [2025-08-25 10:31:03][351240641620445][1 ms][DEBUG] START check_scloud [2025-08-25 10:31:03][351240641620445][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:31:03][351240641620445][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 14624 22779 24163108 184628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:31:03][351240641620445][320 ms][DEBUG] targetPkg: running [2025-08-25 10:31:03][351240641620445][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-25 10:31:03][351240641620445][320 ms][DEBUG] START check_boot_completed [2025-08-25 10:31:03][351240641620445][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:31:03][351240641620445][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:31:03][351240641620445][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:31:03][351240641620445][413 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:31:03][351240641620445][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:31:03][351240641620445][413 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:31:03][351240641620445][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641620445\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5875\"}'\'' -e'"" [2025-08-25 10:31:03][351240641620445][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:31:03][351240641620445][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641620445\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5875\"}'\'' -e'"" [2025-08-25 10:31:07][351240641620445][4381 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_438136eb-0e4b-4447-a72a-9a9cffd236c2","id":"QR_438136eb-0e4b-4447-a72a-9a9cffd236c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:31:07][351240641620445][4537 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-25 10:31:07][351240641620445][4537 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-25 10:31:07][351240641620445][4537 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:32:04][351371810271627][0 ms][INFO] === Request start === [2025-08-25 10:32:04][351371810271627][1 ms][DEBUG] START check_scloud [2025-08-25 10:32:04][351371810271627][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:32:04][351371810271627][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 14624 22779 24275644 196564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:32:04][351371810271627][264 ms][DEBUG] targetPkg: running [2025-08-25 10:32:04][351371810271627][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-25 10:32:04][351371810271627][264 ms][DEBUG] START check_boot_completed [2025-08-25 10:32:04][351371810271627][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:32:05][351371810271627][311 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:32:05][351371810271627][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:32:05][351371810271627][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:32:05][351371810271627][358 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:32:05][351371810271627][358 ms][DEBUG] START check_internet [2025-08-25 10:32:05][351371810271627][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:32:05][351371810271627][639 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.113/174.113/174.113/0.000 ms\n [2025-08-25 10:32:05][351371810271627][639 ms][DEBUG] check_internet: online [2025-08-25 10:32:05][351371810271627][639 ms][DEBUG] END check_internet in 282 ms [2025-08-25 10:32:05][351371810271627][640 ms][DEBUG] rawBody.length=1149 [2025-08-25 10:32:05][351371810271627][640 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351371810271627\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2588\"}'\'' -e'"" [2025-08-25 10:32:05][351371810271627][640 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:32:05][351371810271627][640 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351371810271627\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2588\"}'\'' -e'"" [2025-08-25 10:32:11][351371810271627][7121 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2583a5a1-de8a-4e1c-ad90-b4becd01ede8","id":"QR_2583a5a1-de8a-4e1c-ad90-b4becd01ede8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:32:12][351371810271627][7278 ms][DEBUG] proc_open done in 6638 ms; code=255; res.len=3343 [2025-08-25 10:32:12][351371810271627][7278 ms][DEBUG] END runCmdUntilRes#1 in 6638 ms [2025-08-25 10:32:12][351371810271627][7278 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:33:03][351642481748907][1 ms][INFO] === Request start === [2025-08-25 10:33:03][351642481748907][1 ms][DEBUG] START check_scloud [2025-08-25 10:33:03][351642481748907][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:33:03][351642481748907][279 ms][DEBUG] SU: done in 277 ms; outu0_a118 14624 22779 24418080 208236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:33:03][351642481748907][279 ms][DEBUG] targetPkg: running [2025-08-25 10:33:03][351642481748907][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-25 10:33:03][351642481748907][279 ms][DEBUG] START check_boot_completed [2025-08-25 10:33:03][351642481748907][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:33:03][351642481748907][325 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:33:03][351642481748907][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:33:03][351642481748907][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:33:03][351642481748907][372 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:33:03][351642481748907][372 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:33:03][351642481748907][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642481748907\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9594\"}'\'' -e'"" [2025-08-25 10:33:03][351642481748907][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:33:03][351642481748907][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642481748907\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9594\"}'\'' -e'"" [2025-08-25 10:33:07][351642481748907][4277 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99537e30-e1b2-43bd-9e36-846536b8a30e","id":"QR_99537e30-e1b2-43bd-9e36-846536b8a30e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:33:07][351642481748907][4434 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-25 10:33:07][351642481748907][4434 ms][DEBUG] END runCmdUntilRes#1 in 4062 ms [2025-08-25 10:33:07][351642481748907][4434 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:34:03][351328119371912][0 ms][INFO] === Request start === [2025-08-25 10:34:03][351328119371912][1 ms][DEBUG] START check_scloud [2025-08-25 10:34:03][351328119371912][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:34:03][351328119371912][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 14624 22779 24566788 219008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:34:03][351328119371912][327 ms][DEBUG] targetPkg: running [2025-08-25 10:34:03][351328119371912][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-25 10:34:03][351328119371912][327 ms][DEBUG] START check_boot_completed [2025-08-25 10:34:03][351328119371912][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:34:03][351328119371912][374 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:34:03][351328119371912][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:34:04][351328119371912][436 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 10:34:04][351328119371912][436 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:34:04][351328119371912][436 ms][DEBUG] START check_internet [2025-08-25 10:34:04][351328119371912][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:34:04][351328119371912][952 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.784/201.784/201.784/0.000 ms\n [2025-08-25 10:34:04][351328119371912][952 ms][DEBUG] check_internet: online [2025-08-25 10:34:04][351328119371912][952 ms][DEBUG] END check_internet in 515 ms [2025-08-25 10:34:04][351328119371912][952 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:34:04][351328119371912][952 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351328119371912\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5295\"}'\'' -e'"" [2025-08-25 10:34:04][351328119371912][952 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:34:04][351328119371912][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351328119371912\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5295\"}'\'' -e'"" [2025-08-25 10:34:08][351328119371912][4982 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c18eda38-3d0c-4801-b34f-069528ace9e0","id":"QR_c18eda38-3d0c-4801-b34f-069528ace9e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:34:08][351328119371912][5138 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 10:34:08][351328119371912][5138 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 10:34:08][351328119371912][5138 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:35:03][350471123534249][0 ms][INFO] === Request start === [2025-08-25 10:35:03][350471123534249][1 ms][DEBUG] START check_scloud [2025-08-25 10:35:03][350471123534249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:35:04][350471123534249][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 14624 22779 24672296 231100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:35:04][350471123534249][269 ms][DEBUG] targetPkg: running [2025-08-25 10:35:04][350471123534249][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-25 10:35:04][350471123534249][269 ms][DEBUG] START check_boot_completed [2025-08-25 10:35:04][350471123534249][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:35:04][350471123534249][315 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:35:04][350471123534249][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:35:04][350471123534249][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:35:04][350471123534249][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:35:04][350471123534249][362 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:35:04][350471123534249][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471123534249\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9844\"}'\'' -e'"" [2025-08-25 10:35:04][350471123534249][362 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:35:04][350471123534249][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471123534249\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9844\"}'\'' -e'"" [2025-08-25 10:35:08][350471123534249][4471 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3818928-6e86-4a8c-9bb8-0649d24130b7","id":"QR_f3818928-6e86-4a8c-9bb8-0649d24130b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:35:08][350471123534249][4627 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 10:35:08][350471123534249][4627 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-08-25 10:35:08][350471123534249][4627 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:35:10][351062770261787][1 ms][INFO] === Request start === [2025-08-25 10:35:10][351062770261787][1 ms][DEBUG] START check_scloud [2025-08-25 10:35:10][351062770261787][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:35:11][351062770261787][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 14624 22779 24796340 241912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:35:11][351062770261787][314 ms][DEBUG] targetPkg: running [2025-08-25 10:35:11][351062770261787][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 10:35:11][351062770261787][314 ms][DEBUG] START check_boot_completed [2025-08-25 10:35:11][351062770261787][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:35:11][351062770261787][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:35:11][351062770261787][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:35:11][351062770261787][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:35:11][351062770261787][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:35:11][351062770261787][407 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:35:11][351062770261787][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351062770261787\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9036\"}'\'' -e'"" [2025-08-25 10:35:11][351062770261787][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:35:11][351062770261787][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351062770261787\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9036\"}'\'' -e'"" [2025-08-25 10:35:14][351062770261787][4000 ms][DEBUG] proc_open done in 3593 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 10:35:14][351062770261787][4001 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-08-25 10:35:14][351062770261787][4001 ms][WARN] Detected error: Process with pid 14624 either refused to load frida-agent, or terminated during injection [2025-08-25 10:35:14][351062770261787][4001 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 10:35:14][351062770261787][4156 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 10:35:14][351062770261787][4157 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 10:35:14][351062770261787][4157 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 10:35:15][351062770261787][4313 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 10:35:15][351062770261787][4313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 10:35:15][351062770261787][4454 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 10:35:17][351062770261787][6468 ms][DEBUG] START check_boot_completed [2025-08-25 10:35:17][351062770261787][6468 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:35:17][351062770261787][6515 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:35:17][351062770261787][6515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:35:17][351062770261787][6562 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:35:17][351062770261787][6562 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:35:20][351062770261787][9577 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 10:35:20][351062770261787][9577 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351062770261787\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9036\"}'\'' -e'"" [2025-08-25 10:35:24][351062770261787][13420 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79604a93-2c28-4300-9574-9abd50c354d8","id":"QR_79604a93-2c28-4300-9574-9abd50c354d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:35:24][351062770261787][13576 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-08-25 10:35:24][351062770261787][13576 ms][DEBUG] END runCmdUntilRes#2 in 3999 ms [2025-08-25 10:35:24][351062770261787][13576 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:40:04][354327822081666][1 ms][INFO] === Request start === [2025-08-25 10:40:04][354327822081666][1 ms][DEBUG] START check_scloud [2025-08-25 10:40:04][354327822081666][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:40:05][354327822081666][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 15893 22779 23470692 128384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:40:05][354327822081666][256 ms][DEBUG] targetPkg: running [2025-08-25 10:40:05][354327822081666][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-25 10:40:05][354327822081666][256 ms][DEBUG] START check_boot_completed [2025-08-25 10:40:05][354327822081666][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:40:05][354327822081666][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:40:05][354327822081666][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:40:05][354327822081666][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:40:05][354327822081666][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:40:05][354327822081666][349 ms][DEBUG] START check_internet [2025-08-25 10:40:05][354327822081666][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:40:05][354327822081666][865 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.570/201.570/201.570/0.000 ms\n [2025-08-25 10:40:05][354327822081666][865 ms][DEBUG] check_internet: online [2025-08-25 10:40:05][354327822081666][865 ms][DEBUG] END check_internet in 516 ms [2025-08-25 10:40:05][354327822081666][865 ms][DEBUG] rawBody.length=1158 [2025-08-25 10:40:05][354327822081666][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354327822081666\",\"model\":\"SM-T500\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9ANC0NBM6J\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7371\"}'\'' -e'"" [2025-08-25 10:40:05][354327822081666][865 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:40:05][354327822081666][866 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354327822081666\",\"model\":\"SM-T500\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9ANC0NBM6J\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7371\"}'\'' -e'"" [2025-08-25 10:40:09][354327822081666][4942 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_faf025fd-ab81-4ffa-9b15-f12848e9ad8e","id":"QR_faf025fd-ab81-4ffa-9b15-f12848e9ad8e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:40:09][354327822081666][5098 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 10:40:09][354327822081666][5098 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 10:40:09][354327822081666][5098 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:40:12][352809852968575][0 ms][INFO] === Request start === [2025-08-25 10:40:12][352809852968575][1 ms][DEBUG] START check_scloud [2025-08-25 10:40:12][352809852968575][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:40:12][352809852968575][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 15893 22779 23621356 139456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:40:12][352809852968575][302 ms][DEBUG] targetPkg: running [2025-08-25 10:40:12][352809852968575][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 10:40:12][352809852968575][302 ms][DEBUG] START check_boot_completed [2025-08-25 10:40:12][352809852968575][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:40:12][352809852968575][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:40:12][352809852968575][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:40:12][352809852968575][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:40:12][352809852968575][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:40:12][352809852968575][411 ms][DEBUG] START check_internet [2025-08-25 10:40:12][352809852968575][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:40:13][352809852968575][801 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.332/242.332/242.332/0.000 ms\n [2025-08-25 10:40:13][352809852968575][802 ms][DEBUG] check_internet: online [2025-08-25 10:40:13][352809852968575][802 ms][DEBUG] END check_internet in 391 ms [2025-08-25 10:40:13][352809852968575][802 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:40:13][352809852968575][802 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352809852968575\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3346\"}'\'' -e'"" [2025-08-25 10:40:13][352809852968575][802 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:40:13][352809852968575][802 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352809852968575\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3346\"}'\'' -e'"" [2025-08-25 10:40:16][352809852968575][4613 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc2a9d7e-0113-4f2f-af95-f7daeef84b96","id":"QR_dc2a9d7e-0113-4f2f-af95-f7daeef84b96","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:40:17][352809852968575][4769 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-25 10:40:17][352809852968575][4769 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-25 10:40:17][352809852968575][4769 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:43:03][352397451569853][1 ms][INFO] === Request start === [2025-08-25 10:43:03][352397451569853][1 ms][DEBUG] START check_scloud [2025-08-25 10:43:03][352397451569853][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:43:03][352397451569853][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 15893 22779 23722924 151772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:43:03][352397451569853][313 ms][DEBUG] targetPkg: running [2025-08-25 10:43:03][352397451569853][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 10:43:03][352397451569853][314 ms][DEBUG] START check_boot_completed [2025-08-25 10:43:03][352397451569853][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:43:03][352397451569853][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:43:03][352397451569853][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:43:03][352397451569853][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:43:03][352397451569853][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:43:03][352397451569853][407 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:43:03][352397451569853][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451569853\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2299\"}'\'' -e'"" [2025-08-25 10:43:03][352397451569853][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:43:03][352397451569853][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397451569853\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2299\"}'\'' -e'"" [2025-08-25 10:43:07][352397451569853][4515 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9bd3d1f-275e-46fd-9c9a-2233334725a3","id":"QR_d9bd3d1f-275e-46fd-9c9a-2233334725a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:43:07][352397451569853][4671 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 10:43:07][352397451569853][4672 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-08-25 10:43:07][352397451569853][4672 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:47:03][350832442483154][1 ms][INFO] === Request start === [2025-08-25 10:47:03][350832442483154][1 ms][DEBUG] START check_scloud [2025-08-25 10:47:03][350832442483154][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:47:03][350832442483154][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 15893 22779 23852112 162764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:47:03][350832442483154][318 ms][DEBUG] targetPkg: running [2025-08-25 10:47:03][350832442483154][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 10:47:03][350832442483154][318 ms][DEBUG] START check_boot_completed [2025-08-25 10:47:03][350832442483154][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:47:03][350832442483154][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:47:03][350832442483154][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:47:03][350832442483154][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:47:03][350832442483154][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:47:03][350832442483154][411 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:47:03][350832442483154][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442483154\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8671\"}'\'' -e'"" [2025-08-25 10:47:03][350832442483154][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:47:03][350832442483154][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442483154\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8671\"}'\'' -e'"" [2025-08-25 10:47:07][350832442483154][4363 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82c74510-9a2b-40bb-bb1d-cbda29bc9227","id":"QR_82c74510-9a2b-40bb-bb1d-cbda29bc9227","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:47:07][350832442483154][4520 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-25 10:47:07][350832442483154][4520 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-25 10:47:07][350832442483154][4520 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:47:10][352397454992987][0 ms][INFO] === Request start === [2025-08-25 10:47:10][352397454992987][0 ms][DEBUG] START check_scloud [2025-08-25 10:47:10][352397454992987][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:47:10][352397454992987][262 ms][DEBUG] SU: done in 262 ms; outu0_a118 15893 22779 23986456 173520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:47:10][352397454992987][262 ms][DEBUG] targetPkg: running [2025-08-25 10:47:10][352397454992987][262 ms][DEBUG] END check_scloud in 262 ms [2025-08-25 10:47:10][352397454992987][262 ms][DEBUG] START check_boot_completed [2025-08-25 10:47:10][352397454992987][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:47:10][352397454992987][293 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 10:47:10][352397454992987][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:47:10][352397454992987][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:47:10][352397454992987][340 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 10:47:10][352397454992987][340 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:47:10][352397454992987][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397454992987\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4996\"}'\'' -e'"" [2025-08-25 10:47:10][352397454992987][340 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:47:10][352397454992987][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397454992987\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4996\"}'\'' -e'"" [2025-08-25 10:47:14][352397454992987][3980 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2eefa4d-1561-4524-bf5e-b5095ff3dab2","id":"QR_f2eefa4d-1561-4524-bf5e-b5095ff3dab2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:47:14][352397454992987][4136 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=3343 [2025-08-25 10:47:14][352397454992987][4136 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-25 10:47:14][352397454992987][4136 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:49:03][354071311106929][0 ms][INFO] === Request start === [2025-08-25 10:49:03][354071311106929][1 ms][DEBUG] START check_scloud [2025-08-25 10:49:03][354071311106929][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:49:03][354071311106929][326 ms][DEBUG] SU: done in 326 ms; outu0_a118 15893 22779 24075736 185816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:49:03][354071311106929][327 ms][DEBUG] targetPkg: running [2025-08-25 10:49:03][354071311106929][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-25 10:49:03][354071311106929][327 ms][DEBUG] START check_boot_completed [2025-08-25 10:49:03][354071311106929][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:49:03][354071311106929][373 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:49:03][354071311106929][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:49:03][354071311106929][436 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 10:49:03][354071311106929][436 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 10:49:03][354071311106929][436 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:49:03][354071311106929][436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354071311106929\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4309\"}'\'' -e'"" [2025-08-25 10:49:03][354071311106929][436 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:49:03][354071311106929][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354071311106929\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4309\"}'\'' -e'"" [2025-08-25 10:49:07][354071311106929][4575 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_899564a6-e521-4b2d-b2ee-5368177ce09a","id":"QR_899564a6-e521-4b2d-b2ee-5368177ce09a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:49:07][354071311106929][4731 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-25 10:49:07][354071311106929][4732 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-25 10:49:07][354071311106929][4732 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:53:03][357153473336549][1 ms][INFO] === Request start === [2025-08-25 10:53:03][357153473336549][1 ms][DEBUG] START check_scloud [2025-08-25 10:53:03][357153473336549][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:53:04][357153473336549][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 15893 22779 24219352 198192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:53:04][357153473336549][316 ms][DEBUG] targetPkg: running [2025-08-25 10:53:04][357153473336549][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 10:53:04][357153473336549][316 ms][DEBUG] START check_boot_completed [2025-08-25 10:53:04][357153473336549][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:53:04][357153473336549][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 10:53:04][357153473336549][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:53:04][357153473336549][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:53:04][357153473336549][395 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 10:53:04][357153473336549][395 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:53:04][357153473336549][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357153473336549\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3916\"}'\'' -e'"" [2025-08-25 10:53:04][357153473336549][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:53:04][357153473336549][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357153473336549\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3916\"}'\'' -e'"" [2025-08-25 10:53:07][357153473336549][4268 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 10:53:08][357153473336549][4424 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=115 [2025-08-25 10:53:08][357153473336549][4424 ms][DEBUG] END runCmdUntilRes#1 in 4029 ms [2025-08-25 10:53:08][357153473336549][4424 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 10:53:08][][0 ms][INFO] === Request start === [2025-08-25 10:53:08][][1 ms][DEBUG] START check_scloud [2025-08-25 10:53:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:53:08][][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 15893 22779 24365920 194092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:53:08][][256 ms][DEBUG] targetPkg: running [2025-08-25 10:53:08][][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-25 10:53:08][][256 ms][DEBUG] START check_boot_completed [2025-08-25 10:53:08][][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:53:08][][287 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 10:53:08][][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:53:08][][334 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:53:08][][334 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 10:53:08][][334 ms][DEBUG] rawBody.length=1129 [2025-08-25 10:53:08][][334 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T910JQGY\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8286\"}'\'' -e'"" [2025-08-25 10:53:08][][334 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:53:08][][334 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T910JQGY\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8286\"}'\'' -e'"" [2025-08-25 10:53:12][][3755 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 10:53:12][][3911 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=107 [2025-08-25 10:53:12][][3912 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-25 10:53:12][][3912 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 10:53:14][357153473336549][0 ms][INFO] === Request start === [2025-08-25 10:53:14][357153473336549][1 ms][DEBUG] START check_scloud [2025-08-25 10:53:14][357153473336549][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:53:14][357153473336549][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 15893 22779 24535144 198456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:53:14][357153473336549][268 ms][DEBUG] targetPkg: running [2025-08-25 10:53:14][357153473336549][268 ms][DEBUG] END check_scloud in 268 ms [2025-08-25 10:53:14][357153473336549][269 ms][DEBUG] START check_boot_completed [2025-08-25 10:53:14][357153473336549][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:53:14][357153473336549][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:53:14][357153473336549][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:53:15][357153473336549][363 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 10:53:15][357153473336549][363 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:53:15][357153473336549][363 ms][DEBUG] rawBody.length=1149 [2025-08-25 10:53:15][357153473336549][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357153473336549\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4532\"}'\'' -e'"" [2025-08-25 10:53:15][357153473336549][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:53:15][357153473336549][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357153473336549\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4532\"}'\'' -e'"" [2025-08-25 10:53:21][357153473336549][7282 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0548a95d-ca6c-4698-bde4-7ec764d1e268","id":"QR_0548a95d-ca6c-4698-bde4-7ec764d1e268","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:53:22][357153473336549][7438 ms][DEBUG] proc_open done in 7075 ms; code=255; res.len=3343 [2025-08-25 10:53:22][357153473336549][7438 ms][DEBUG] END runCmdUntilRes#1 in 7075 ms [2025-08-25 10:53:22][357153473336549][7438 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:54:03][353285384649851][0 ms][INFO] === Request start === [2025-08-25 10:54:03][353285384649851][1 ms][DEBUG] START check_scloud [2025-08-25 10:54:03][353285384649851][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:54:03][353285384649851][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 15893 22779 24628484 210912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:54:03][353285384649851][256 ms][DEBUG] targetPkg: running [2025-08-25 10:54:03][353285384649851][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-25 10:54:03][353285384649851][256 ms][DEBUG] START check_boot_completed [2025-08-25 10:54:03][353285384649851][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:54:03][353285384649851][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:54:03][353285384649851][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:54:03][353285384649851][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:54:03][353285384649851][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:54:03][353285384649851][350 ms][DEBUG] START check_internet [2025-08-25 10:54:03][353285384649851][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 10:54:04][353285384649851][818 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.945/200.945/200.945/0.000 ms\n [2025-08-25 10:54:04][353285384649851][819 ms][DEBUG] check_internet: online [2025-08-25 10:54:04][353285384649851][819 ms][DEBUG] END check_internet in 469 ms [2025-08-25 10:54:04][353285384649851][819 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:54:04][353285384649851][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353285384649851\",\"model\":\"SM-F721N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2815\"}'\'' -e'"" [2025-08-25 10:54:04][353285384649851][819 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:54:04][353285384649851][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353285384649851\",\"model\":\"SM-F721N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2815\"}'\'' -e'"" [2025-08-25 10:54:08][353285384649851][4724 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1e82d98-bb4e-43f9-9027-6666c9337d17","id":"QR_d1e82d98-bb4e-43f9-9027-6666c9337d17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:54:08][353285384649851][4880 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-25 10:54:08][353285384649851][4880 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-25 10:54:08][353285384649851][4880 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:57:03][351828118832608][1 ms][INFO] === Request start === [2025-08-25 10:57:03][351828118832608][1 ms][DEBUG] START check_scloud [2025-08-25 10:57:03][351828118832608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:57:03][351828118832608][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 15893 22779 24788844 207568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:57:03][351828118832608][308 ms][DEBUG] targetPkg: running [2025-08-25 10:57:03][351828118832608][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 10:57:03][351828118832608][308 ms][DEBUG] START check_boot_completed [2025-08-25 10:57:03][351828118832608][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:57:03][351828118832608][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 10:57:03][351828118832608][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:57:03][351828118832608][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:57:03][351828118832608][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 10:57:03][351828118832608][386 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:57:03][351828118832608][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828118832608\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4855\"}'\'' -e'"" [2025-08-25 10:57:03][351828118832608][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:57:03][351828118832608][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828118832608\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4855\"}'\'' -e'"" [2025-08-25 10:57:08][351828118832608][4651 ms][DEBUG] proc_open done in 4264 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 10:57:08][351828118832608][4651 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 10:57:08][351828118832608][4651 ms][WARN] Detected error: Process with pid 15893 either refused to load frida-agent, or terminated during injection [2025-08-25 10:57:08][351828118832608][4651 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 10:57:08][351828118832608][4791 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 10:57:08][351828118832608][4792 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 10:57:08][351828118832608][4792 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 10:57:08][351828118832608][4948 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 10:57:08][351828118832608][4948 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 10:57:08][351828118832608][5135 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 10:57:10][351828118832608][7150 ms][DEBUG] START check_boot_completed [2025-08-25 10:57:10][351828118832608][7150 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:57:10][351828118832608][7197 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 10:57:10][351828118832608][7197 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:57:10][351828118832608][7244 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:57:10][351828118832608][7244 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 10:57:13][351828118832608][10259 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 10:57:13][351828118832608][10259 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828118832608\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4855\"}'\'' -e'"" [2025-08-25 10:57:17][351828118832608][14258 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5320110e-8398-4395-8035-c244756e2420","id":"QR_5320110e-8398-4395-8035-c244756e2420","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:57:17][351828118832608][14414 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-25 10:57:17][351828118832608][14414 ms][DEBUG] END runCmdUntilRes#2 in 4156 ms [2025-08-25 10:57:17][351828118832608][14414 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 10:57:20][352288969668768][0 ms][INFO] === Request start === [2025-08-25 10:57:20][352288969668768][1 ms][DEBUG] START check_scloud [2025-08-25 10:57:20][352288969668768][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 10:57:20][352288969668768][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 18225 22779 23535708 125872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 10:57:20][352288969668768][302 ms][DEBUG] targetPkg: running [2025-08-25 10:57:20][352288969668768][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 10:57:20][352288969668768][302 ms][DEBUG] START check_boot_completed [2025-08-25 10:57:20][352288969668768][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 10:57:20][352288969668768][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 10:57:20][352288969668768][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 10:57:20][352288969668768][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 10:57:20][352288969668768][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 10:57:20][352288969668768][395 ms][DEBUG] rawBody.length=1148 [2025-08-25 10:57:20][352288969668768][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288969668768\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3134\"}'\'' -e'"" [2025-08-25 10:57:20][352288969668768][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 10:57:20][352288969668768][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288969668768\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3134\"}'\'' -e'"" [2025-08-25 10:57:24][352288969668768][4066 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0829db1e-e099-4382-86da-64a100c90f92","id":"QR_0829db1e-e099-4382-86da-64a100c90f92","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 10:57:24][352288969668768][4222 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-25 10:57:24][352288969668768][4222 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-25 10:57:24][352288969668768][4223 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:00:03][350013881658776][1 ms][INFO] === Request start === [2025-08-25 11:00:03][350013881658776][1 ms][DEBUG] START check_scloud [2025-08-25 11:00:03][350013881658776][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:00:03][350013881658776][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 18225 22779 23580104 139668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:00:03][350013881658776][251 ms][DEBUG] targetPkg: running [2025-08-25 11:00:03][350013881658776][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-25 11:00:03][350013881658776][251 ms][DEBUG] START check_boot_completed [2025-08-25 11:00:03][350013881658776][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:00:03][350013881658776][282 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:00:03][350013881658776][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:00:03][350013881658776][329 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:00:03][350013881658776][329 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 11:00:03][350013881658776][329 ms][DEBUG] START check_internet [2025-08-25 11:00:03][350013881658776][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:00:04][350013881658776][735 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.718/201.718/201.718/0.000 ms\n [2025-08-25 11:00:04][350013881658776][736 ms][DEBUG] check_internet: online [2025-08-25 11:00:04][350013881658776][736 ms][DEBUG] END check_internet in 406 ms [2025-08-25 11:00:04][350013881658776][736 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:00:04][350013881658776][736 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881658776\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9230\"}'\'' -e'"" [2025-08-25 11:00:04][350013881658776][736 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:00:04][350013881658776][736 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881658776\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9230\"}'\'' -e'"" [2025-08-25 11:00:08][350013881658776][4672 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad2c6afa-cb2f-49ee-bc1f-acc240c6b98d","id":"QR_ad2c6afa-cb2f-49ee-bc1f-acc240c6b98d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:00:08][350013881658776][4828 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-25 11:00:08][350013881658776][4828 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-25 11:00:08][350013881658776][4828 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:03:03][358692300847839][1 ms][INFO] === Request start === [2025-08-25 11:03:03][358692300847839][1 ms][DEBUG] START check_scloud [2025-08-25 11:03:03][358692300847839][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:03:04][358692300847839][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 18225 22779 23726892 151740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:03:04][358692300847839][262 ms][DEBUG] targetPkg: running [2025-08-25 11:03:04][358692300847839][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-25 11:03:04][358692300847839][262 ms][DEBUG] START check_boot_completed [2025-08-25 11:03:04][358692300847839][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:03:04][358692300847839][309 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:03:04][358692300847839][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:03:04][358692300847839][371 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:03:04][358692300847839][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:03:04][358692300847839][372 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:03:04][358692300847839][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358692300847839\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5465\"}'\'' -e'"" [2025-08-25 11:03:04][358692300847839][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:03:04][358692300847839][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358692300847839\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5465\"}'\'' -e'"" [2025-08-25 11:03:08][358692300847839][4605 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_619ea3ef-c136-4b42-9385-e5b1e4684659","id":"QR_619ea3ef-c136-4b42-9385-e5b1e4684659","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:03:08][358692300847839][4761 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-25 11:03:08][358692300847839][4761 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-25 11:03:08][358692300847839][4761 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:06:03][352549939307062][1 ms][INFO] === Request start === [2025-08-25 11:06:03][352549939307062][1 ms][DEBUG] START check_scloud [2025-08-25 11:06:03][352549939307062][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:06:03][352549939307062][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 18225 22779 23861200 163108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:06:03][352549939307062][272 ms][DEBUG] targetPkg: running [2025-08-25 11:06:03][352549939307062][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-25 11:06:03][352549939307062][272 ms][DEBUG] START check_boot_completed [2025-08-25 11:06:03][352549939307062][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:06:03][352549939307062][318 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:06:03][352549939307062][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:06:04][352549939307062][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:06:04][352549939307062][365 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:06:04][352549939307062][365 ms][DEBUG] START check_internet [2025-08-25 11:06:04][352549939307062][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:06:04][352549939307062][912 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.975/201.975/201.975/0.000 ms\n [2025-08-25 11:06:04][352549939307062][913 ms][DEBUG] check_internet: online [2025-08-25 11:06:04][352549939307062][913 ms][DEBUG] END check_internet in 547 ms [2025-08-25 11:06:04][352549939307062][913 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:06:04][352549939307062][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549939307062\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1729\"}'\'' -e'"" [2025-08-25 11:06:04][352549939307062][913 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:06:04][352549939307062][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549939307062\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1729\"}'\'' -e'"" [2025-08-25 11:06:08][352549939307062][5145 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa148db5-92ee-4ea8-8cc9-a3b0fe084ba1","id":"QR_aa148db5-92ee-4ea8-8cc9-a3b0fe084ba1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:06:08][352549939307062][5302 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-25 11:06:08][352549939307062][5302 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-25 11:06:08][352549939307062][5302 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:08:03][351285620158081][1 ms][INFO] === Request start === [2025-08-25 11:08:03][351285620158081][1 ms][DEBUG] START check_scloud [2025-08-25 11:08:03][351285620158081][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:08:03][351285620158081][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 18225 22779 23997300 173676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:08:03][351285620158081][257 ms][DEBUG] targetPkg: running [2025-08-25 11:08:03][351285620158081][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-25 11:08:03][351285620158081][257 ms][DEBUG] START check_boot_completed [2025-08-25 11:08:03][351285620158081][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:08:03][351285620158081][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:08:03][351285620158081][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:08:03][351285620158081][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:08:03][351285620158081][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:08:03][351285620158081][350 ms][DEBUG] START check_internet [2025-08-25 11:08:03][351285620158081][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:08:04][351285620158081][710 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.687/259.687/259.687/0.000 ms\n [2025-08-25 11:08:04][351285620158081][710 ms][DEBUG] check_internet: online [2025-08-25 11:08:04][351285620158081][710 ms][DEBUG] END check_internet in 360 ms [2025-08-25 11:08:04][351285620158081][710 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:08:04][351285620158081][710 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285620158081\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2676\"}'\'' -e'"" [2025-08-25 11:08:04][351285620158081][710 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:08:04][351285620158081][710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285620158081\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2676\"}'\'' -e'"" [2025-08-25 11:08:08][351285620158081][4865 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f482f0ed-225a-45ea-a935-6e204a314708","id":"QR_f482f0ed-225a-45ea-a935-6e204a314708","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:08:08][351285620158081][5021 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 11:08:08][351285620158081][5021 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 11:08:08][351285620158081][5021 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:12:03][351240640896764][1 ms][INFO] === Request start === [2025-08-25 11:12:03][351240640896764][1 ms][DEBUG] START check_scloud [2025-08-25 11:12:03][351240640896764][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:12:03][351240640896764][254 ms][DEBUG] SU: done in 252 ms; outu0_a118 18225 22779 24138868 184972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:12:03][351240640896764][254 ms][DEBUG] targetPkg: running [2025-08-25 11:12:03][351240640896764][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-25 11:12:03][351240640896764][254 ms][DEBUG] START check_boot_completed [2025-08-25 11:12:03][351240640896764][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:12:03][351240640896764][285 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:12:03][351240640896764][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:12:03][351240640896764][332 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:12:03][351240640896764][332 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 11:12:03][351240640896764][332 ms][DEBUG] START check_internet [2025-08-25 11:12:03][351240640896764][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:12:04][351240640896764][769 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.534/201.534/201.534/0.000 ms\n [2025-08-25 11:12:04][351240640896764][770 ms][DEBUG] check_internet: online [2025-08-25 11:12:04][351240640896764][770 ms][DEBUG] END check_internet in 437 ms [2025-08-25 11:12:04][351240640896764][770 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:12:04][351240640896764][770 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640896764\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8106\"}'\'' -e'"" [2025-08-25 11:12:04][351240640896764][770 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:12:04][351240640896764][770 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640896764\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8106\"}'\'' -e'"" [2025-08-25 11:12:08][351240640896764][5206 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_119892b6-cc79-47e5-b74f-a72425af97a1","id":"QR_119892b6-cc79-47e5-b74f-a72425af97a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:12:09][351240640896764][5362 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-25 11:12:09][351240640896764][5362 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-25 11:12:09][351240640896764][5362 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:13:03][355859837219492][0 ms][INFO] === Request start === [2025-08-25 11:13:03][355859837219492][1 ms][DEBUG] START check_scloud [2025-08-25 11:13:03][355859837219492][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:13:03][355859837219492][259 ms][DEBUG] SU: done in 259 ms; outu0_a118 18225 22779 24244376 195620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:13:03][355859837219492][259 ms][DEBUG] targetPkg: running [2025-08-25 11:13:03][355859837219492][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 11:13:03][355859837219492][260 ms][DEBUG] START check_boot_completed [2025-08-25 11:13:03][355859837219492][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:13:03][355859837219492][306 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:13:03][355859837219492][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:13:03][355859837219492][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:13:03][355859837219492][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:13:03][355859837219492][353 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:13:03][355859837219492][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859837219492\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1425\"}'\'' -e'"" [2025-08-25 11:13:03][355859837219492][353 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:13:03][355859837219492][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859837219492\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1425\"}'\'' -e'"" [2025-08-25 11:13:07][355859837219492][4618 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1e82c3c-8547-4325-bd68-30a33d3f1111","id":"QR_a1e82c3c-8547-4325-bd68-30a33d3f1111","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:13:07][355859837219492][4774 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3343 [2025-08-25 11:13:07][355859837219492][4774 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-08-25 11:13:07][355859837219492][4774 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:13:10][355320543766235][0 ms][INFO] === Request start === [2025-08-25 11:13:10][355320543766235][1 ms][DEBUG] START check_scloud [2025-08-25 11:13:10][355320543766235][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:13:10][355320543766235][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 18225 22779 24395168 207480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:13:10][355320543766235][322 ms][DEBUG] targetPkg: running [2025-08-25 11:13:10][355320543766235][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-25 11:13:10][355320543766235][322 ms][DEBUG] START check_boot_completed [2025-08-25 11:13:10][355320543766235][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:13:10][355320543766235][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:13:10][355320543766235][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:13:11][355320543766235][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:13:11][355320543766235][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:13:11][355320543766235][431 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:13:11][355320543766235][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320543766235\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4091\"}'\'' -e'"" [2025-08-25 11:13:11][355320543766235][431 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:13:11][355320543766235][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320543766235\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4091\"}'\'' -e'"" [2025-08-25 11:13:15][355320543766235][4914 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a229e693-17fe-4e6a-a2ad-e1f7b6495729","id":"QR_a229e693-17fe-4e6a-a2ad-e1f7b6495729","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:13:15][355320543766235][5071 ms][DEBUG] proc_open done in 4640 ms; code=255; res.len=3343 [2025-08-25 11:13:15][355320543766235][5071 ms][DEBUG] END runCmdUntilRes#1 in 4640 ms [2025-08-25 11:13:15][355320543766235][5071 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:13:18][357262979285660][0 ms][INFO] === Request start === [2025-08-25 11:13:18][357262979285660][1 ms][DEBUG] START check_scloud [2025-08-25 11:13:18][357262979285660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:13:18][357262979285660][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18225 22779 24535720 218404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:13:18][357262979285660][308 ms][DEBUG] targetPkg: running [2025-08-25 11:13:18][357262979285660][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 11:13:18][357262979285660][308 ms][DEBUG] START check_boot_completed [2025-08-25 11:13:18][357262979285660][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:13:18][357262979285660][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:13:18][357262979285660][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:13:18][357262979285660][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:13:18][357262979285660][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 11:13:18][357262979285660][385 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:13:18][357262979285660][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262979285660\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9857\"}'\'' -e'"" [2025-08-25 11:13:18][357262979285660][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:13:18][357262979285660][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262979285660\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9857\"}'\'' -e'"" [2025-08-25 11:13:22][357262979285660][4681 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36d0f340-7922-4345-b2e1-0ca358bea51b","id":"QR_36d0f340-7922-4345-b2e1-0ca358bea51b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:13:22][357262979285660][4837 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-08-25 11:13:22][357262979285660][4837 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-25 11:13:22][357262979285660][4837 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:13:25][356414815401578][0 ms][INFO] === Request start === [2025-08-25 11:13:25][356414815401578][1 ms][DEBUG] START check_scloud [2025-08-25 11:13:25][356414815401578][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:13:25][356414815401578][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 18225 22779 24668044 230488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:13:25][356414815401578][325 ms][DEBUG] targetPkg: running [2025-08-25 11:13:25][356414815401578][325 ms][DEBUG] END check_scloud in 325 ms [2025-08-25 11:13:25][356414815401578][325 ms][DEBUG] START check_boot_completed [2025-08-25 11:13:25][356414815401578][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:13:25][356414815401578][372 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:13:25][356414815401578][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:13:25][356414815401578][434 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:13:25][356414815401578][435 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:13:25][356414815401578][435 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:13:25][356414815401578][435 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815401578\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3578\"}'\'' -e'"" [2025-08-25 11:13:25][356414815401578][435 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:13:25][356414815401578][435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815401578\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3578\"}'\'' -e'"" [2025-08-25 11:13:29][356414815401578][4168 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf95e084-0082-4864-8b5e-74a305a6f436","id":"QR_cf95e084-0082-4864-8b5e-74a305a6f436","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:13:29][356414815401578][4324 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-25 11:13:29][356414815401578][4324 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-25 11:13:29][356414815401578][4324 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:16:03][350532459615322][0 ms][INFO] === Request start === [2025-08-25 11:16:03][350532459615322][0 ms][DEBUG] START check_scloud [2025-08-25 11:16:03][350532459615322][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:16:04][350532459615322][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 18225 22779 24769452 241716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:16:04][350532459615322][309 ms][DEBUG] targetPkg: running [2025-08-25 11:16:04][350532459615322][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 11:16:04][350532459615322][309 ms][DEBUG] START check_boot_completed [2025-08-25 11:16:04][350532459615322][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:16:04][350532459615322][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:16:04][350532459615322][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:16:04][350532459615322][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:16:04][350532459615322][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 11:16:04][350532459615322][387 ms][DEBUG] START check_internet [2025-08-25 11:16:04][350532459615322][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:16:04][350532459615322][809 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.400/201.400/201.400/0.000 ms\n [2025-08-25 11:16:04][350532459615322][809 ms][DEBUG] check_internet: online [2025-08-25 11:16:04][350532459615322][809 ms][DEBUG] END check_internet in 422 ms [2025-08-25 11:16:04][350532459615322][809 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:16:04][350532459615322][809 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350532459615322\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7595\"}'\'' -e'"" [2025-08-25 11:16:04][350532459615322][809 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:16:04][350532459615322][809 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350532459615322\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7595\"}'\'' -e'"" [2025-08-25 11:16:08][350532459615322][4589 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 11:16:08][350532459615322][4589 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-25 11:16:08][350532459615322][4589 ms][WARN] Detected error: Process with pid 18225 either refused to load frida-agent, or terminated during injection [2025-08-25 11:16:08][350532459615322][4589 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 11:16:08][350532459615322][4746 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 11:16:08][350532459615322][4746 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 11:16:08][350532459615322][4746 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 11:16:08][350532459615322][4886 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 11:16:08][350532459615322][4886 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 11:16:08][350532459615322][5042 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 11:16:10][350532459615322][7057 ms][DEBUG] START check_boot_completed [2025-08-25 11:16:10][350532459615322][7057 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:16:10][350532459615322][7104 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:16:10][350532459615322][7105 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:16:11][350532459615322][7167 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:16:11][350532459615322][7167 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 11:16:14][350532459615322][10182 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 11:16:14][350532459615322][10182 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350532459615322\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7595\"}'\'' -e'"" [2025-08-25 11:16:18][350532459615322][14181 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a62c649-6c9c-413a-b23c-c10e601e20c7","id":"QR_3a62c649-6c9c-413a-b23c-c10e601e20c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:16:18][350532459615322][14337 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-25 11:16:18][350532459615322][14337 ms][DEBUG] END runCmdUntilRes#2 in 4155 ms [2025-08-25 11:16:18][350532459615322][14337 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:17:03][354705112697871][0 ms][INFO] === Request start === [2025-08-25 11:17:03][354705112697871][0 ms][DEBUG] START check_scloud [2025-08-25 11:17:03][354705112697871][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:17:03][354705112697871][281 ms][DEBUG] SU: done in 281 ms; outu0_a118 19657 22779 23455892 129492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:17:03][354705112697871][281 ms][DEBUG] targetPkg: running [2025-08-25 11:17:03][354705112697871][281 ms][DEBUG] END check_scloud in 281 ms [2025-08-25 11:17:03][354705112697871][281 ms][DEBUG] START check_boot_completed [2025-08-25 11:17:03][354705112697871][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:17:03][354705112697871][312 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:17:03][354705112697871][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:17:03][354705112697871][375 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:17:03][354705112697871][375 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 11:17:03][354705112697871][375 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:17:03][354705112697871][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354705112697871\",\"model\":\"SM-A716S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2076\"}'\'' -e'"" [2025-08-25 11:17:03][354705112697871][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:17:03][354705112697871][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354705112697871\",\"model\":\"SM-A716S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2076\"}'\'' -e'"" [2025-08-25 11:17:07][354705112697871][4483 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3062e80c-b290-4f5d-89bc-0563bdf5f2d8","id":"QR_3062e80c-b290-4f5d-89bc-0563bdf5f2d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:17:07][354705112697871][4640 ms][DEBUG] proc_open done in 4265 ms; code=255; res.len=3343 [2025-08-25 11:17:07][354705112697871][4640 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-08-25 11:17:07][354705112697871][4640 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:18:04][354454653172222][1 ms][INFO] === Request start === [2025-08-25 11:18:04][354454653172222][1 ms][DEBUG] START check_scloud [2025-08-25 11:18:04][354454653172222][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:18:04][354454653172222][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 19657 22779 23606456 139476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:18:04][354454653172222][305 ms][DEBUG] targetPkg: running [2025-08-25 11:18:04][354454653172222][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 11:18:04][354454653172222][305 ms][DEBUG] START check_boot_completed [2025-08-25 11:18:04][354454653172222][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:18:04][354454653172222][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:18:04][354454653172222][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:18:04][354454653172222][399 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 11:18:04][354454653172222][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 11:18:04][354454653172222][399 ms][DEBUG] START check_internet [2025-08-25 11:18:04][354454653172222][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:18:05][354454653172222][758 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.566/247.566/247.566/0.000 ms\n [2025-08-25 11:18:05][354454653172222][758 ms][DEBUG] check_internet: online [2025-08-25 11:18:05][354454653172222][758 ms][DEBUG] END check_internet in 359 ms [2025-08-25 11:18:05][354454653172222][758 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:18:05][354454653172222][758 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454653172222\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5260\"}'\'' -e'"" [2025-08-25 11:18:05][354454653172222][758 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:18:05][354454653172222][758 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454653172222\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5260\"}'\'' -e'"" [2025-08-25 11:18:09][354454653172222][4850 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_213382e2-5763-4055-bb5d-76685797961d","id":"QR_213382e2-5763-4055-bb5d-76685797961d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:18:09][354454653172222][5006 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-25 11:18:09][354454653172222][5006 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-25 11:18:09][354454653172222][5006 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:19:02][352432792290123][0 ms][INFO] === Request start === [2025-08-25 11:19:02][352432792290123][1 ms][DEBUG] START check_scloud [2025-08-25 11:19:02][352432792290123][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:19:03][352432792290123][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 19657 22779 23737616 151484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:19:03][352432792290123][310 ms][DEBUG] targetPkg: running [2025-08-25 11:19:03][352432792290123][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 11:19:03][352432792290123][310 ms][DEBUG] START check_boot_completed [2025-08-25 11:19:03][352432792290123][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:19:03][352432792290123][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:19:03][352432792290123][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:19:03][352432792290123][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:19:03][352432792290123][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:19:03][352432792290123][404 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:19:03][352432792290123][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432792290123\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8075\"}'\'' -e'"" [2025-08-25 11:19:03][352432792290123][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:19:03][352432792290123][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432792290123\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8075\"}'\'' -e'"" [2025-08-25 11:19:07][352432792290123][4684 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_deb6194d-5d89-4267-9f84-ad2f5d57a9f4","id":"QR_deb6194d-5d89-4267-9f84-ad2f5d57a9f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:19:07][352432792290123][4840 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-25 11:19:07][352432792290123][4840 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-25 11:19:07][352432792290123][4840 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:20:03][351240640441066][0 ms][INFO] === Request start === [2025-08-25 11:20:03][351240640441066][1 ms][DEBUG] START check_scloud [2025-08-25 11:20:03][351240640441066][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:20:03][351240640441066][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 19657 22779 23878132 162684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:20:03][351240640441066][313 ms][DEBUG] targetPkg: running [2025-08-25 11:20:03][351240640441066][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 11:20:03][351240640441066][313 ms][DEBUG] START check_boot_completed [2025-08-25 11:20:03][351240640441066][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:20:03][351240640441066][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:20:03][351240640441066][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:20:03][351240640441066][408 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 11:20:03][351240640441066][408 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 11:20:03][351240640441066][409 ms][DEBUG] START check_internet [2025-08-25 11:20:03][351240640441066][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:20:04][351240640441066][1000 ms][DEBUG] SU: done in 592 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.467/202.467/202.467/0.000 ms\n [2025-08-25 11:20:04][351240640441066][1001 ms][DEBUG] check_internet: online [2025-08-25 11:20:04][351240640441066][1001 ms][DEBUG] END check_internet in 592 ms [2025-08-25 11:20:04][351240640441066][1001 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:20:04][351240640441066][1001 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640441066\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3753\"}'\'' -e'"" [2025-08-25 11:20:04][351240640441066][1001 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:20:04][351240640441066][1001 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640441066\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3753\"}'\'' -e'"" [2025-08-25 11:20:08][351240640441066][5140 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd7e6ca7-70de-4ed9-8d7a-d93329a07a31","id":"QR_fd7e6ca7-70de-4ed9-8d7a-d93329a07a31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:20:08][351240640441066][5296 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-25 11:20:08][351240640441066][5296 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-25 11:20:08][351240640441066][5296 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:20:11][350482800133908][0 ms][INFO] === Request start === [2025-08-25 11:20:11][350482800133908][0 ms][DEBUG] START check_scloud [2025-08-25 11:20:11][350482800133908][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:20:11][350482800133908][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 19657 22779 24057596 173704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:20:11][350482800133908][316 ms][DEBUG] targetPkg: running [2025-08-25 11:20:11][350482800133908][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 11:20:11][350482800133908][316 ms][DEBUG] START check_boot_completed [2025-08-25 11:20:11][350482800133908][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:20:11][350482800133908][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:20:11][350482800133908][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:20:11][350482800133908][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:20:11][350482800133908][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 11:20:11][350482800133908][394 ms][DEBUG] START check_internet [2025-08-25 11:20:11][350482800133908][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:20:12][350482800133908][644 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.172/140.172/140.172/0.000 ms\n [2025-08-25 11:20:12][350482800133908][644 ms][DEBUG] check_internet: online [2025-08-25 11:20:12][350482800133908][644 ms][DEBUG] END check_internet in 250 ms [2025-08-25 11:20:12][350482800133908][644 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:20:12][350482800133908][644 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482800133908\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1496\"}'\'' -e'"" [2025-08-25 11:20:12][350482800133908][644 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:20:12][350482800133908][644 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350482800133908\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1496\"}'\'' -e'"" [2025-08-25 11:20:15][350482800133908][4377 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f973a1f7-d484-443c-be67-2c2dd87bcb4c","id":"QR_f973a1f7-d484-443c-be67-2c2dd87bcb4c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:20:16][350482800133908][4533 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-25 11:20:16][350482800133908][4533 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-25 11:20:16][350482800133908][4533 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:24:03][350013884662031][1 ms][INFO] === Request start === [2025-08-25 11:24:03][350013884662031][1 ms][DEBUG] START check_scloud [2025-08-25 11:24:03][350013884662031][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:24:03][350013884662031][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 19657 22779 24157116 186048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:24:03][350013884662031][287 ms][DEBUG] targetPkg: running [2025-08-25 11:24:03][350013884662031][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-25 11:24:03][350013884662031][287 ms][DEBUG] START check_boot_completed [2025-08-25 11:24:03][350013884662031][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:24:03][350013884662031][318 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:24:03][350013884662031][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:24:03][350013884662031][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:24:03][350013884662031][365 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 11:24:03][350013884662031][365 ms][DEBUG] START check_internet [2025-08-25 11:24:03][350013884662031][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:24:04][350013884662031][771 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=211 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 211.234/211.234/211.234/0.000 ms\n [2025-08-25 11:24:04][350013884662031][772 ms][DEBUG] check_internet: online [2025-08-25 11:24:04][350013884662031][772 ms][DEBUG] END check_internet in 406 ms [2025-08-25 11:24:04][350013884662031][772 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:24:04][350013884662031][772 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884662031\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3657\"}'\'' -e'"" [2025-08-25 11:24:04][350013884662031][772 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:24:04][350013884662031][772 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884662031\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3657\"}'\'' -e'"" [2025-08-25 11:24:08][350013884662031][4864 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49233388-284e-48a9-89a1-c2e495ca392c","id":"QR_49233388-284e-48a9-89a1-c2e495ca392c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:24:08][350013884662031][5020 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-25 11:24:08][350013884662031][5020 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-25 11:24:08][350013884662031][5020 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:24:11][357576776564245][0 ms][INFO] === Request start === [2025-08-25 11:24:11][357576776564245][1 ms][DEBUG] START check_scloud [2025-08-25 11:24:11][357576776564245][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:24:11][357576776564245][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 19657 22779 24307780 197060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:24:11][357576776564245][310 ms][DEBUG] targetPkg: running [2025-08-25 11:24:11][357576776564245][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 11:24:11][357576776564245][310 ms][DEBUG] START check_boot_completed [2025-08-25 11:24:11][357576776564245][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:24:11][357576776564245][355 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 11:24:11][357576776564245][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:24:11][357576776564245][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:24:11][357576776564245][418 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 11:24:11][357576776564245][418 ms][DEBUG] START check_internet [2025-08-25 11:24:11][357576776564245][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:24:11][357576776564245][746 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=210 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 210.150/210.150/210.150/0.000 ms\n [2025-08-25 11:24:11][357576776564245][746 ms][DEBUG] check_internet: online [2025-08-25 11:24:11][357576776564245][746 ms][DEBUG] END check_internet in 328 ms [2025-08-25 11:24:11][357576776564245][746 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:24:11][357576776564245][746 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576776564245\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6188\"}'\'' -e'"" [2025-08-25 11:24:11][357576776564245][746 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:24:11][357576776564245][746 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576776564245\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6188\"}'\'' -e'"" [2025-08-25 11:24:15][357576776564245][4776 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c192090-9944-4e79-82cd-d7674694c7b1","id":"QR_7c192090-9944-4e79-82cd-d7674694c7b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:24:16][357576776564245][4932 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 11:24:16][357576776564245][4932 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 11:24:16][357576776564245][4932 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:25:03][351676565681444][0 ms][INFO] === Request start === [2025-08-25 11:25:03][351676565681444][1 ms][DEBUG] START check_scloud [2025-08-25 11:25:03][351676565681444][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:25:03][351676565681444][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 19657 22779 24443844 208856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:25:03][351676565681444][307 ms][DEBUG] targetPkg: running [2025-08-25 11:25:03][351676565681444][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 11:25:03][351676565681444][307 ms][DEBUG] START check_boot_completed [2025-08-25 11:25:03][351676565681444][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:25:04][351676565681444][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:25:04][351676565681444][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:25:04][351676565681444][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:25:04][351676565681444][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:25:04][351676565681444][400 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:25:04][351676565681444][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676565681444\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3358\"}'\'' -e'"" [2025-08-25 11:25:04][351676565681444][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:25:04][351676565681444][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676565681444\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3358\"}'\'' -e'"" [2025-08-25 11:25:07][351676565681444][4227 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_046670af-8cee-43e6-9dc6-ab83acba0368","id":"QR_046670af-8cee-43e6-9dc6-ab83acba0368","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:25:08][351676565681444][4384 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-25 11:25:08][351676565681444][4384 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 11:25:08][351676565681444][4384 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:26:04][354898530960771][1 ms][INFO] === Request start === [2025-08-25 11:26:04][354898530960771][1 ms][DEBUG] START check_scloud [2025-08-25 11:26:04][354898530960771][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:26:04][354898530960771][289 ms][DEBUG] SU: done in 287 ms; outu0_a118 19657 22779 24576168 219632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:26:04][354898530960771][289 ms][DEBUG] targetPkg: running [2025-08-25 11:26:04][354898530960771][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-25 11:26:04][354898530960771][289 ms][DEBUG] START check_boot_completed [2025-08-25 11:26:04][354898530960771][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:26:04][354898530960771][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:26:04][354898530960771][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:26:04][354898530960771][414 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 11:26:04][354898530960771][414 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 11:26:04][354898530960771][414 ms][DEBUG] START check_internet [2025-08-25 11:26:04][354898530960771][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:26:05][354898530960771][789 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.328/226.328/226.328/0.000 ms\n [2025-08-25 11:26:05][354898530960771][789 ms][DEBUG] check_internet: online [2025-08-25 11:26:05][354898530960771][789 ms][DEBUG] END check_internet in 375 ms [2025-08-25 11:26:05][354898530960771][789 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:26:05][354898530960771][789 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354898530960771\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8985\"}'\'' -e'"" [2025-08-25 11:26:05][354898530960771][789 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:26:05][354898530960771][789 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354898530960771\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8985\"}'\'' -e'"" [2025-08-25 11:26:09][354898530960771][4678 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9c3beaa-6d94-4e08-a782-bf1a6fd7c208","id":"QR_d9c3beaa-6d94-4e08-a782-bf1a6fd7c208","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:26:09][354898530960771][4834 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-25 11:26:09][354898530960771][4834 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-25 11:26:09][354898530960771][4834 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:26:11][354721880653921][0 ms][INFO] === Request start === [2025-08-25 11:26:11][354721880653921][1 ms][DEBUG] START check_scloud [2025-08-25 11:26:11][354721880653921][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:26:12][354721880653921][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 19657 22779 24716720 231540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:26:12][354721880653921][273 ms][DEBUG] targetPkg: running [2025-08-25 11:26:12][354721880653921][273 ms][DEBUG] END check_scloud in 273 ms [2025-08-25 11:26:12][354721880653921][273 ms][DEBUG] START check_boot_completed [2025-08-25 11:26:12][354721880653921][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:26:12][354721880653921][318 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 11:26:12][354721880653921][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:26:12][354721880653921][381 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:26:12][354721880653921][381 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 11:26:12][354721880653921][381 ms][DEBUG] START check_internet [2025-08-25 11:26:12][354721880653921][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:26:12][354721880653921][756 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.185/247.185/247.185/0.000 ms\n [2025-08-25 11:26:12][354721880653921][756 ms][DEBUG] check_internet: online [2025-08-25 11:26:12][354721880653921][756 ms][DEBUG] END check_internet in 375 ms [2025-08-25 11:26:12][354721880653921][756 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:26:12][354721880653921][756 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354721880653921\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1226\"}'\'' -e'"" [2025-08-25 11:26:12][354721880653921][756 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:26:12][354721880653921][756 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354721880653921\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1226\"}'\'' -e'"" [2025-08-25 11:26:16][354721880653921][4427 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec0fb48f-bba0-477d-9fbf-f54f1116cb3e","id":"QR_ec0fb48f-bba0-477d-9fbf-f54f1116cb3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:26:16][354721880653921][4583 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-25 11:26:16][354721880653921][4583 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-25 11:26:16][354721880653921][4583 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:26:18][351240640526080][0 ms][INFO] === Request start === [2025-08-25 11:26:18][351240640526080][1 ms][DEBUG] START check_scloud [2025-08-25 11:26:18][351240640526080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:26:19][351240640526080][292 ms][DEBUG] SU: done in 292 ms; outu0_a118 19657 22779 24890040 242492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:26:19][351240640526080][293 ms][DEBUG] targetPkg: running [2025-08-25 11:26:19][351240640526080][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-25 11:26:19][351240640526080][293 ms][DEBUG] START check_boot_completed [2025-08-25 11:26:19][351240640526080][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:26:19][351240640526080][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:26:19][351240640526080][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:26:19][351240640526080][402 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 11:26:19][351240640526080][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:26:19][351240640526080][402 ms][DEBUG] START check_internet [2025-08-25 11:26:19][351240640526080][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:26:19][351240640526080][683 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.318/163.318/163.318/0.000 ms\n [2025-08-25 11:26:19][351240640526080][684 ms][DEBUG] check_internet: online [2025-08-25 11:26:19][351240640526080][684 ms][DEBUG] END check_internet in 282 ms [2025-08-25 11:26:19][351240640526080][684 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:26:19][351240640526080][684 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640526080\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1630\"}'\'' -e'"" [2025-08-25 11:26:19][351240640526080][684 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:26:19][351240640526080][684 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640526080\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1630\"}'\'' -e'"" [2025-08-25 11:26:23][351240640526080][4292 ms][DEBUG] proc_open done in 3607 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 11:26:23][351240640526080][4292 ms][DEBUG] END runCmdUntilRes#1 in 3607 ms [2025-08-25 11:26:23][351240640526080][4292 ms][WARN] Detected error: Process with pid 19657 either refused to load frida-agent, or terminated during injection [2025-08-25 11:26:23][351240640526080][4292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 11:26:23][351240640526080][4432 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 11:26:23][351240640526080][4432 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 11:26:23][351240640526080][4432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 11:26:23][351240640526080][4557 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 11:26:23][351240640526080][4557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 11:26:23][351240640526080][4729 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 11:26:25][351240640526080][6744 ms][DEBUG] START check_boot_completed [2025-08-25 11:26:25][351240640526080][6744 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:26:25][351240640526080][6791 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:26:25][351240640526080][6791 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:26:25][351240640526080][6838 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:26:25][351240640526080][6838 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 11:26:28][351240640526080][9853 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 11:26:28][351240640526080][9853 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640526080\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1630\"}'\'' -e'"" [2025-08-25 11:26:32][351240640526080][13430 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d95066ea-7a68-47e2-aa09-91d51d0b801d","id":"QR_d95066ea-7a68-47e2-aa09-91d51d0b801d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:26:32][351240640526080][13586 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-25 11:26:32][351240640526080][13586 ms][DEBUG] END runCmdUntilRes#2 in 3734 ms [2025-08-25 11:26:32][351240640526080][13586 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:26:34][350756480334245][0 ms][INFO] === Request start === [2025-08-25 11:26:34][350756480334245][1 ms][DEBUG] START check_scloud [2025-08-25 11:26:34][350756480334245][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:26:35][350756480334245][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 21276 22779 23553560 125552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:26:35][350756480334245][263 ms][DEBUG] targetPkg: running [2025-08-25 11:26:35][350756480334245][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-25 11:26:35][350756480334245][263 ms][DEBUG] START check_boot_completed [2025-08-25 11:26:35][350756480334245][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:26:35][350756480334245][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:26:35][350756480334245][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:26:35][350756480334245][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:26:35][350756480334245][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:26:35][350756480334245][356 ms][DEBUG] START check_internet [2025-08-25 11:26:35][350756480334245][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:26:35][350756480334245][622 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.088/171.088/171.088/0.000 ms\n [2025-08-25 11:26:35][350756480334245][622 ms][DEBUG] check_internet: online [2025-08-25 11:26:35][350756480334245][622 ms][DEBUG] END check_internet in 266 ms [2025-08-25 11:26:35][350756480334245][622 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:26:35][350756480334245][623 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756480334245\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5777\"}'\'' -e'"" [2025-08-25 11:26:35][350756480334245][623 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:26:35][350756480334245][623 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756480334245\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5777\"}'\'' -e'"" [2025-08-25 11:26:39][350756480334245][4324 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e7b8008-652b-424f-b040-7f5f69820c61","id":"QR_1e7b8008-652b-424f-b040-7f5f69820c61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:26:39][350756480334245][4481 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-25 11:26:39][350756480334245][4481 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 11:26:39][350756480334245][4481 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:28:04][354068195763056][0 ms][INFO] === Request start === [2025-08-25 11:28:04][354068195763056][1 ms][DEBUG] START check_scloud [2025-08-25 11:28:04][354068195763056][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:28:04][354068195763056][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 21276 22779 23667156 138816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:28:04][354068195763056][260 ms][DEBUG] targetPkg: running [2025-08-25 11:28:04][354068195763056][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-25 11:28:04][354068195763056][260 ms][DEBUG] START check_boot_completed [2025-08-25 11:28:04][354068195763056][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:28:04][354068195763056][290 ms][DEBUG] ADB: done in 30 ms; out [2025-08-25 11:28:04][354068195763056][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:28:04][354068195763056][337 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:28:04][354068195763056][337 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-25 11:28:04][354068195763056][337 ms][DEBUG] START check_internet [2025-08-25 11:28:04][354068195763056][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:28:04][354068195763056][681 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=235 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 235.282/235.282/235.282/0.000 ms\n [2025-08-25 11:28:04][354068195763056][681 ms][DEBUG] check_internet: online [2025-08-25 11:28:04][354068195763056][681 ms][DEBUG] END check_internet in 344 ms [2025-08-25 11:28:04][354068195763056][681 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:28:04][354068195763056][681 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195763056\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4128\"}'\'' -e'"" [2025-08-25 11:28:04][354068195763056][681 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:28:04][354068195763056][682 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195763056\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4128\"}'\'' -e'"" [2025-08-25 11:28:09][354068195763056][4914 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55dde49c-f080-440c-8d5d-738ab0b6bd0b","id":"QR_55dde49c-f080-440c-8d5d-738ab0b6bd0b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:28:09][354068195763056][5070 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-25 11:28:09][354068195763056][5070 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-25 11:28:09][354068195763056][5070 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:28:11][352288963837302][1 ms][INFO] === Request start === [2025-08-25 11:28:11][352288963837302][1 ms][DEBUG] START check_scloud [2025-08-25 11:28:11][352288963837302][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:28:12][352288963837302][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 21276 22779 23811548 150496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:28:12][352288963837302][312 ms][DEBUG] targetPkg: running [2025-08-25 11:28:12][352288963837302][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 11:28:12][352288963837302][312 ms][DEBUG] START check_boot_completed [2025-08-25 11:28:12][352288963837302][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:28:12][352288963837302][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:28:12][352288963837302][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:28:12][352288963837302][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:28:12][352288963837302][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:28:12][352288963837302][421 ms][DEBUG] START check_internet [2025-08-25 11:28:12][352288963837302][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:28:12][352288963837302][764 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.712/247.712/247.712/0.000 ms\n [2025-08-25 11:28:12][352288963837302][764 ms][DEBUG] check_internet: online [2025-08-25 11:28:12][352288963837302][764 ms][DEBUG] END check_internet in 343 ms [2025-08-25 11:28:12][352288963837302][764 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:28:12][352288963837302][764 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963837302\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5162\"}'\'' -e'"" [2025-08-25 11:28:12][352288963837302][764 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:28:12][352288963837302][764 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963837302\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5162\"}'\'' -e'"" [2025-08-25 11:28:16][352288963837302][4592 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_daaab063-05ae-4869-b331-b88e0ad76fe2","id":"QR_daaab063-05ae-4869-b331-b88e0ad76fe2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:28:16][352288963837302][4748 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-25 11:28:16][352288963837302][4748 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 11:28:16][352288963837302][4748 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:29:03][351648440553536][0 ms][INFO] === Request start === [2025-08-25 11:29:03][351648440553536][1 ms][DEBUG] START check_scloud [2025-08-25 11:29:03][351648440553536][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:29:03][351648440553536][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 21276 22779 23922064 161604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:29:03][351648440553536][307 ms][DEBUG] targetPkg: running [2025-08-25 11:29:03][351648440553536][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 11:29:03][351648440553536][307 ms][DEBUG] START check_boot_completed [2025-08-25 11:29:03][351648440553536][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:29:03][351648440553536][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:29:03][351648440553536][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:29:03][351648440553536][402 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 11:29:03][351648440553536][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 11:29:03][351648440553536][402 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:29:03][351648440553536][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648440553536\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9990\"}'\'' -e'"" [2025-08-25 11:29:03][351648440553536][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:29:03][351648440553536][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648440553536\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9990\"}'\'' -e'"" [2025-08-25 11:29:07][351648440553536][4384 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae3a9fd5-d373-4b04-8519-ae9d57f6ae36","id":"QR_ae3a9fd5-d373-4b04-8519-ae9d57f6ae36","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:29:07][351648440553536][4540 ms][DEBUG] proc_open done in 4138 ms; code=255; res.len=3343 [2025-08-25 11:29:07][351648440553536][4540 ms][DEBUG] END runCmdUntilRes#1 in 4138 ms [2025-08-25 11:29:07][351648440553536][4540 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:29:10][354773371537998][0 ms][INFO] === Request start === [2025-08-25 11:29:10][354773371537998][1 ms][DEBUG] START check_scloud [2025-08-25 11:29:10][354773371537998][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:29:10][354773371537998][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 21276 22779 24091288 172416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:29:10][354773371537998][251 ms][DEBUG] targetPkg: running [2025-08-25 11:29:10][354773371537998][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-25 11:29:10][354773371537998][251 ms][DEBUG] START check_boot_completed [2025-08-25 11:29:10][354773371537998][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:29:10][354773371537998][296 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:29:10][354773371537998][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:29:10][354773371537998][375 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 11:29:10][354773371537998][375 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-25 11:29:10][354773371537998][375 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:29:10][354773371537998][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354773371537998\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7346\"}'\'' -e'"" [2025-08-25 11:29:10][354773371537998][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:29:10][354773371537998][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354773371537998\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7346\"}'\'' -e'"" [2025-08-25 11:29:15][354773371537998][4530 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97db1f63-f0a7-4d81-96cd-24989d36b5a6","id":"QR_97db1f63-f0a7-4d81-96cd-24989d36b5a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:29:15][354773371537998][4686 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 11:29:15][354773371537998][4686 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 11:29:15][354773371537998][4686 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:31:03][352737402358171][1 ms][INFO] === Request start === [2025-08-25 11:31:03][352737402358171][1 ms][DEBUG] START check_scloud [2025-08-25 11:31:03][352737402358171][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:31:03][352737402358171][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 21276 22779 24199000 184544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:31:03][352737402358171][304 ms][DEBUG] targetPkg: running [2025-08-25 11:31:03][352737402358171][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 11:31:03][352737402358171][305 ms][DEBUG] START check_boot_completed [2025-08-25 11:31:03][352737402358171][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:31:03][352737402358171][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:31:03][352737402358171][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:31:03][352737402358171][400 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 11:31:03][352737402358171][400 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 11:31:03][352737402358171][400 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:31:03][352737402358171][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737402358171\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9346\"}'\'' -e'"" [2025-08-25 11:31:03][352737402358171][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:31:03][352737402358171][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737402358171\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9346\"}'\'' -e'"" [2025-08-25 11:31:07][352737402358171][4350 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae0a32dd-88a3-408d-9b04-1ef171084bbb","id":"QR_ae0a32dd-88a3-408d-9b04-1ef171084bbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:31:07][352737402358171][4506 ms][DEBUG] proc_open done in 4106 ms; code=255; res.len=3343 [2025-08-25 11:31:07][352737402358171][4506 ms][DEBUG] END runCmdUntilRes#1 in 4107 ms [2025-08-25 11:31:07][352737402358171][4506 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:34:04][354401161637386][1 ms][INFO] === Request start === [2025-08-25 11:34:04][354401161637386][1 ms][DEBUG] START check_scloud [2025-08-25 11:34:04][354401161637386][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:34:05][354401161637386][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 21276 22779 24327228 196000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:34:05][354401161637386][311 ms][DEBUG] targetPkg: running [2025-08-25 11:34:05][354401161637386][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 11:34:05][354401161637386][311 ms][DEBUG] START check_boot_completed [2025-08-25 11:34:05][354401161637386][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:34:05][354401161637386][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:34:05][354401161637386][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:34:05][354401161637386][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:34:05][354401161637386][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 11:34:05][354401161637386][405 ms][DEBUG] START check_internet [2025-08-25 11:34:05][354401161637386][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:34:05][354401161637386][904 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.280/198.280/198.280/0.000 ms\n [2025-08-25 11:34:05][354401161637386][904 ms][DEBUG] check_internet: online [2025-08-25 11:34:05][354401161637386][905 ms][DEBUG] END check_internet in 499 ms [2025-08-25 11:34:05][354401161637386][905 ms][DEBUG] rawBody.length=1149 [2025-08-25 11:34:05][354401161637386][905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401161637386\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9355\"}'\'' -e'"" [2025-08-25 11:34:05][354401161637386][905 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:34:05][354401161637386][905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401161637386\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9355\"}'\'' -e'"" [2025-08-25 11:34:10][354401161637386][6090 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_634d5bfc-e7b1-4a2c-822e-123f751412ca","id":"QR_634d5bfc-e7b1-4a2c-822e-123f751412ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:34:11][354401161637386][6247 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-08-25 11:34:11][354401161637386][6247 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-08-25 11:34:11][354401161637386][6247 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:38:03][352133645109102][1 ms][INFO] === Request start === [2025-08-25 11:38:03][352133645109102][1 ms][DEBUG] START check_scloud [2025-08-25 11:38:03][352133645109102][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:38:04][352133645109102][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 21276 22779 24476860 208260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:38:04][352133645109102][312 ms][DEBUG] targetPkg: running [2025-08-25 11:38:04][352133645109102][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 11:38:04][352133645109102][312 ms][DEBUG] START check_boot_completed [2025-08-25 11:38:04][352133645109102][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:38:04][352133645109102][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:38:04][352133645109102][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:38:04][352133645109102][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:38:04][352133645109102][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 11:38:04][352133645109102][391 ms][DEBUG] START check_internet [2025-08-25 11:38:04][352133645109102][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:38:04][352133645109102][703 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.546/205.546/205.546/0.000 ms\n [2025-08-25 11:38:04][352133645109102][703 ms][DEBUG] check_internet: online [2025-08-25 11:38:04][352133645109102][703 ms][DEBUG] END check_internet in 312 ms [2025-08-25 11:38:04][352133645109102][703 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:38:04][352133645109102][703 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133645109102\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3903\"}'\'' -e'"" [2025-08-25 11:38:04][352133645109102][703 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:38:04][352133645109102][704 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133645109102\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3903\"}'\'' -e'"" [2025-08-25 11:38:08][352133645109102][4842 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d448cce-946d-41eb-a525-38c5b7869dbf","id":"QR_1d448cce-946d-41eb-a525-38c5b7869dbf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:38:08][352133645109102][4998 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-25 11:38:08][352133645109102][4998 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-25 11:38:08][352133645109102][4998 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:38:11][353520950088039][0 ms][INFO] === Request start === [2025-08-25 11:38:11][353520950088039][1 ms][DEBUG] START check_scloud [2025-08-25 11:38:11][353520950088039][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:38:11][353520950088039][256 ms][DEBUG] SU: done in 256 ms; outu0_a118 21276 22779 24625476 219176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:38:11][353520950088039][257 ms][DEBUG] targetPkg: running [2025-08-25 11:38:11][353520950088039][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-25 11:38:11][353520950088039][257 ms][DEBUG] START check_boot_completed [2025-08-25 11:38:11][353520950088039][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:38:11][353520950088039][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:38:11][353520950088039][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:38:11][353520950088039][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:38:11][353520950088039][350 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 11:38:11][353520950088039][350 ms][DEBUG] START check_internet [2025-08-25 11:38:11][353520950088039][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:38:12][353520950088039][678 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.021/223.021/223.021/0.000 ms\n [2025-08-25 11:38:12][353520950088039][678 ms][DEBUG] check_internet: online [2025-08-25 11:38:12][353520950088039][678 ms][DEBUG] END check_internet in 328 ms [2025-08-25 11:38:12][353520950088039][678 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:38:12][353520950088039][679 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520950088039\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7142\"}'\'' -e'"" [2025-08-25 11:38:12][353520950088039][679 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:38:12][353520950088039][679 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520950088039\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7142\"}'\'' -e'"" [2025-08-25 11:38:16][353520950088039][4708 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae53b7ab-e0ce-42d2-99da-53e3cb59d400","id":"QR_ae53b7ab-e0ce-42d2-99da-53e3cb59d400","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:38:16][353520950088039][4865 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 11:38:16][353520950088039][4865 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 11:38:16][353520950088039][4865 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:39:02][353497471874967][0 ms][INFO] === Request start === [2025-08-25 11:39:02][353497471874967][1 ms][DEBUG] START check_scloud [2025-08-25 11:39:02][353497471874967][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:39:02][353497471874967][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 21276 22779 24731076 231192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:39:02][353497471874967][260 ms][DEBUG] targetPkg: running [2025-08-25 11:39:02][353497471874967][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-25 11:39:02][353497471874967][260 ms][DEBUG] START check_boot_completed [2025-08-25 11:39:02][353497471874967][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:39:02][353497471874967][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:39:02][353497471874967][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:39:02][353497471874967][369 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:39:02][353497471874967][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:39:02][353497471874967][370 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:39:02][353497471874967][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497471874967\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7759\"}'\'' -e'"" [2025-08-25 11:39:02][353497471874967][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:39:02][353497471874967][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497471874967\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7759\"}'\'' -e'"" [2025-08-25 11:39:05][353497471874967][3853 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 11:39:06][353497471874967][4009 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=115 [2025-08-25 11:39:06][353497471874967][4009 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-25 11:39:06][353497471874967][4009 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 11:39:06][][0 ms][INFO] === Request start === [2025-08-25 11:39:06][][1 ms][DEBUG] START check_scloud [2025-08-25 11:39:06][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:39:06][][279 ms][DEBUG] SU: done in 279 ms; outu0_a118 21276 22779 24862284 242048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:39:06][][279 ms][DEBUG] targetPkg: running [2025-08-25 11:39:06][][279 ms][DEBUG] END check_scloud in 279 ms [2025-08-25 11:39:06][][279 ms][DEBUG] START check_boot_completed [2025-08-25 11:39:06][][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:39:06][][310 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:39:06][][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:39:06][][357 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:39:06][][357 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 11:39:06][][357 ms][DEBUG] rawBody.length=1129 [2025-08-25 11:39:06][][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX214ZMLV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1108\"}'\'' -e'"" [2025-08-25 11:39:06][][358 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:39:06][][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX214ZMLV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1108\"}'\'' -e'"" [2025-08-25 11:39:10][][4107 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 11:39:10][][4107 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-25 11:39:10][][4107 ms][WARN] Detected error: Process with pid 21276 either refused to load frida-agent, or terminated during injection [2025-08-25 11:39:10][][4107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 11:39:10][][4247 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 11:39:10][][4247 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 11:39:10][][4247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 11:39:10][][4372 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 11:39:10][][4372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 11:39:11][][4544 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 11:39:13][][6559 ms][DEBUG] START check_boot_completed [2025-08-25 11:39:13][][6559 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:39:13][][6606 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:39:13][][6606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:39:13][][6653 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:39:13][][6653 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 11:39:16][][9668 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 11:39:16][][9668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX214ZMLV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1108\"}'\'' -e'"" [2025-08-25 11:39:19][][13432 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 11:39:20][][13589 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=115 [2025-08-25 11:39:20][][13589 ms][DEBUG] END runCmdUntilRes#2 in 3921 ms [2025-08-25 11:39:20][][13589 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 11:40:03][353310804283683][0 ms][INFO] === Request start === [2025-08-25 11:40:03][353310804283683][1 ms][DEBUG] START check_scloud [2025-08-25 11:40:03][353310804283683][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:40:03][353310804283683][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 22915 22779 23487796 128588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:40:03][353310804283683][315 ms][DEBUG] targetPkg: running [2025-08-25 11:40:03][353310804283683][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 11:40:03][353310804283683][315 ms][DEBUG] START check_boot_completed [2025-08-25 11:40:03][353310804283683][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:40:03][353310804283683][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:40:03][353310804283683][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:40:03][353310804283683][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:40:03][353310804283683][393 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 11:40:03][353310804283683][393 ms][DEBUG] START check_internet [2025-08-25 11:40:03][353310804283683][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:40:04][353310804283683][893 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.438/200.438/200.438/0.000 ms\n [2025-08-25 11:40:04][353310804283683][893 ms][DEBUG] check_internet: online [2025-08-25 11:40:04][353310804283683][893 ms][DEBUG] END check_internet in 500 ms [2025-08-25 11:40:04][353310804283683][893 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:40:04][353310804283683][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804283683\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2365\"}'\'' -e'"" [2025-08-25 11:40:04][353310804283683][893 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:40:04][353310804283683][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804283683\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2365\"}'\'' -e'"" [2025-08-25 11:40:07][353310804283683][4658 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5db9813e-930f-4a99-8835-5dcda69abb81","id":"QR_5db9813e-930f-4a99-8835-5dcda69abb81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:40:08][353310804283683][4814 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-25 11:40:08][353310804283683][4814 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-25 11:40:08][353310804283683][4814 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:40:09][356192190543863][1 ms][INFO] === Request start === [2025-08-25 11:40:09][356192190543863][1 ms][DEBUG] START check_scloud [2025-08-25 11:40:09][356192190543863][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:40:09][356192190543863][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 22915 22779 23640508 139324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:40:09][356192190543863][273 ms][DEBUG] targetPkg: running [2025-08-25 11:40:09][356192190543863][274 ms][DEBUG] END check_scloud in 272 ms [2025-08-25 11:40:09][356192190543863][274 ms][DEBUG] START check_boot_completed [2025-08-25 11:40:09][356192190543863][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:40:10][356192190543863][320 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:40:10][356192190543863][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:40:10][356192190543863][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:40:10][356192190543863][367 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:40:10][356192190543863][367 ms][DEBUG] START check_internet [2025-08-25 11:40:10][356192190543863][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:40:10][356192190543863][633 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.514/163.514/163.514/0.000 ms\n [2025-08-25 11:40:10][356192190543863][633 ms][DEBUG] check_internet: online [2025-08-25 11:40:10][356192190543863][633 ms][DEBUG] END check_internet in 266 ms [2025-08-25 11:40:10][356192190543863][633 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:40:10][356192190543863][633 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356192190543863\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6965\"}'\'' -e'"" [2025-08-25 11:40:10][356192190543863][633 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:40:10][356192190543863][633 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356192190543863\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6965\"}'\'' -e'"" [2025-08-25 11:40:14][356192190543863][4413 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3a244ce-faab-464c-bdb2-7e95e36123cf","id":"QR_f3a244ce-faab-464c-bdb2-7e95e36123cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:40:14][356192190543863][4569 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-25 11:40:14][356192190543863][4569 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-25 11:40:14][356192190543863][4569 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:41:03][352060487946327][1 ms][INFO] === Request start === [2025-08-25 11:41:03][352060487946327][1 ms][DEBUG] START check_scloud [2025-08-25 11:41:03][352060487946327][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:41:03][352060487946327][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 22915 22779 23737724 150704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:41:03][352060487946327][300 ms][DEBUG] targetPkg: running [2025-08-25 11:41:03][352060487946327][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 11:41:03][352060487946327][300 ms][DEBUG] START check_boot_completed [2025-08-25 11:41:03][352060487946327][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:41:03][352060487946327][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:41:03][352060487946327][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:41:03][352060487946327][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:41:03][352060487946327][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:41:03][352060487946327][409 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:41:03][352060487946327][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060487946327\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5904\"}'\'' -e'"" [2025-08-25 11:41:03][352060487946327][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:41:03][352060487946327][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060487946327\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5904\"}'\'' -e'"" [2025-08-25 11:41:07][352060487946327][4252 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f7684da-5377-481d-8a03-0d7cb9bdb3f0","id":"QR_1f7684da-5377-481d-8a03-0d7cb9bdb3f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:41:07][352060487946327][4408 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-25 11:41:07][352060487946327][4408 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-08-25 11:41:07][352060487946327][4408 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:42:03][351547440671019][0 ms][INFO] === Request start === [2025-08-25 11:42:03][351547440671019][1 ms][DEBUG] START check_scloud [2025-08-25 11:42:03][351547440671019][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:42:04][351547440671019][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22915 22779 23868692 161880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:42:04][351547440671019][308 ms][DEBUG] targetPkg: running [2025-08-25 11:42:04][351547440671019][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 11:42:04][351547440671019][308 ms][DEBUG] START check_boot_completed [2025-08-25 11:42:04][351547440671019][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:42:04][351547440671019][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:42:04][351547440671019][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:42:04][351547440671019][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:42:04][351547440671019][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:42:04][351547440671019][402 ms][DEBUG] START check_internet [2025-08-25 11:42:04][351547440671019][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:42:04][351547440671019][667 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.558/164.558/164.558/0.000 ms\n [2025-08-25 11:42:04][351547440671019][667 ms][DEBUG] check_internet: online [2025-08-25 11:42:04][351547440671019][667 ms][DEBUG] END check_internet in 266 ms [2025-08-25 11:42:04][351547440671019][667 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:42:04][351547440671019][668 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351547440671019\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1405\"}'\'' -e'"" [2025-08-25 11:42:04][351547440671019][668 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:42:04][351547440671019][668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351547440671019\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1405\"}'\'' -e'"" [2025-08-25 11:42:08][351547440671019][4401 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 11:42:08][351547440671019][4557 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=115 [2025-08-25 11:42:08][351547440671019][4557 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-25 11:42:08][351547440671019][4557 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 11:42:08][][0 ms][INFO] === Request start === [2025-08-25 11:42:08][][1 ms][DEBUG] START check_scloud [2025-08-25 11:42:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:42:08][][258 ms][DEBUG] SU: done in 258 ms; outu0_a118 22915 22779 24017244 172848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:42:08][][258 ms][DEBUG] targetPkg: running [2025-08-25 11:42:08][][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-25 11:42:08][][259 ms][DEBUG] START check_boot_completed [2025-08-25 11:42:08][][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:42:08][][305 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:42:08][][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:42:09][][368 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:42:09][][368 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:42:09][][368 ms][DEBUG] START check_internet [2025-08-25 11:42:09][][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:42:09][][618 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.249/137.249/137.249/0.000 ms\n [2025-08-25 11:42:09][][618 ms][DEBUG] check_internet: online [2025-08-25 11:42:09][][618 ms][DEBUG] END check_internet in 250 ms [2025-08-25 11:42:09][][618 ms][DEBUG] rawBody.length=1129 [2025-08-25 11:42:09][][618 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R35K7Y2T\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9930\"}'\'' -e'"" [2025-08-25 11:42:09][][618 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:42:09][][618 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R35K7Y2T\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9930\"}'\'' -e'"" [2025-08-25 11:42:12][][4117 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 11:42:12][][4273 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=115 [2025-08-25 11:42:12][][4273 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-25 11:42:12][][4273 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 11:42:14][351547440671019][1 ms][INFO] === Request start === [2025-08-25 11:42:14][351547440671019][1 ms][DEBUG] START check_scloud [2025-08-25 11:42:14][351547440671019][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:42:15][351547440671019][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 22915 22779 24190568 184560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:42:15][351547440671019][252 ms][DEBUG] targetPkg: running [2025-08-25 11:42:15][351547440671019][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-25 11:42:15][351547440671019][252 ms][DEBUG] START check_boot_completed [2025-08-25 11:42:15][351547440671019][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:42:15][351547440671019][299 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:42:15][351547440671019][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:42:15][351547440671019][346 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:42:15][351547440671019][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:42:15][351547440671019][346 ms][DEBUG] START check_internet [2025-08-25 11:42:15][351547440671019][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:42:15][351547440671019][658 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=206 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 206.581/206.581/206.581/0.000 ms\n [2025-08-25 11:42:15][351547440671019][658 ms][DEBUG] check_internet: online [2025-08-25 11:42:15][351547440671019][658 ms][DEBUG] END check_internet in 313 ms [2025-08-25 11:42:15][351547440671019][658 ms][DEBUG] rawBody.length=1149 [2025-08-25 11:42:15][351547440671019][658 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351547440671019\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9781\"}'\'' -e'"" [2025-08-25 11:42:15][351547440671019][659 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:42:15][351547440671019][659 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351547440671019\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9781\"}'\'' -e'"" [2025-08-25 11:42:22][351547440671019][7344 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bcb01939-a38a-4996-b201-f2c9259926e1","id":"QR_bcb01939-a38a-4996-b201-f2c9259926e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:42:22][351547440671019][7500 ms][DEBUG] proc_open done in 6841 ms; code=255; res.len=3343 [2025-08-25 11:42:22][351547440671019][7500 ms][DEBUG] END runCmdUntilRes#1 in 6842 ms [2025-08-25 11:42:22][351547440671019][7500 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:42:26][350290810914989][0 ms][INFO] === Request start === [2025-08-25 11:42:26][350290810914989][1 ms][DEBUG] START check_scloud [2025-08-25 11:42:26][350290810914989][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:42:26][350290810914989][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 22915 22779 24366952 196544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:42:26][350290810914989][309 ms][DEBUG] targetPkg: running [2025-08-25 11:42:26][350290810914989][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 11:42:26][350290810914989][309 ms][DEBUG] START check_boot_completed [2025-08-25 11:42:26][350290810914989][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:42:26][350290810914989][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:42:26][350290810914989][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:42:26][350290810914989][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:42:26][350290810914989][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 11:42:26][350290810914989][403 ms][DEBUG] START check_internet [2025-08-25 11:42:26][350290810914989][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:42:27][350290810914989][934 ms][DEBUG] SU: done in 530 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.216/201.216/201.216/0.000 ms\n [2025-08-25 11:42:27][350290810914989][934 ms][DEBUG] check_internet: online [2025-08-25 11:42:27][350290810914989][934 ms][DEBUG] END check_internet in 531 ms [2025-08-25 11:42:27][350290810914989][934 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:42:27][350290810914989][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290810914989\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6018\"}'\'' -e'"" [2025-08-25 11:42:27][350290810914989][934 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:42:27][350290810914989][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290810914989\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6018\"}'\'' -e'"" [2025-08-25 11:42:30][350290810914989][4573 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0193cf95-8e7e-4425-9236-6ced533b4277","id":"QR_0193cf95-8e7e-4425-9236-6ced533b4277","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:42:30][350290810914989][4729 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=3343 [2025-08-25 11:42:30][350290810914989][4729 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-25 11:42:30][350290810914989][4730 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:42:33][352842935945096][0 ms][INFO] === Request start === [2025-08-25 11:42:33][352842935945096][1 ms][DEBUG] START check_scloud [2025-08-25 11:42:33][352842935945096][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:42:33][352842935945096][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 22915 22779 24520900 207576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:42:33][352842935945096][270 ms][DEBUG] targetPkg: running [2025-08-25 11:42:33][352842935945096][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-25 11:42:33][352842935945096][270 ms][DEBUG] START check_boot_completed [2025-08-25 11:42:33][352842935945096][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:42:33][352842935945096][332 ms][DEBUG] ADB: done in 62 ms; out [2025-08-25 11:42:33][352842935945096][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:42:33][352842935945096][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:42:33][352842935945096][380 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:42:33][352842935945096][380 ms][DEBUG] START check_internet [2025-08-25 11:42:33][352842935945096][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:42:34][352842935945096][770 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=269 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 269.862/269.862/269.862/0.000 ms\n [2025-08-25 11:42:34][352842935945096][770 ms][DEBUG] check_internet: online [2025-08-25 11:42:34][352842935945096][770 ms][DEBUG] END check_internet in 391 ms [2025-08-25 11:42:34][352842935945096][770 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:42:34][352842935945096][770 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352842935945096\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9441\"}'\'' -e'"" [2025-08-25 11:42:34][352842935945096][771 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:42:34][352842935945096][771 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352842935945096\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9441\"}'\'' -e'"" [2025-08-25 11:42:37][352842935945096][4644 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee6247e9-e20b-4953-a7ca-eff3e1250e85","id":"QR_ee6247e9-e20b-4953-a7ca-eff3e1250e85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:42:38][352842935945096][4800 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-25 11:42:38][352842935945096][4800 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-25 11:42:38][352842935945096][4800 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:43:02][354485115414927][0 ms][INFO] === Request start === [2025-08-25 11:43:02][354485115414927][1 ms][DEBUG] START check_scloud [2025-08-25 11:43:02][354485115414927][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:43:03][354485115414927][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 22915 22779 24612192 218968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:43:03][354485115414927][251 ms][DEBUG] targetPkg: running [2025-08-25 11:43:03][354485115414927][251 ms][DEBUG] END check_scloud in 251 ms [2025-08-25 11:43:03][354485115414927][251 ms][DEBUG] START check_boot_completed [2025-08-25 11:43:03][354485115414927][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:43:03][354485115414927][298 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:43:03][354485115414927][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:43:03][354485115414927][360 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:43:03][354485115414927][361 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:43:03][354485115414927][361 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:43:03][354485115414927][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485115414927\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7672\"}'\'' -e'"" [2025-08-25 11:43:03][354485115414927][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:43:03][354485115414927][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485115414927\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7672\"}'\'' -e'"" [2025-08-25 11:43:06][354485115414927][3984 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8941e7eb-88bd-4a97-9ddc-89b3c81758dd","id":"QR_8941e7eb-88bd-4a97-9ddc-89b3c81758dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:43:07][354485115414927][4141 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-25 11:43:07][354485115414927][4141 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-25 11:43:07][354485115414927][4141 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:44:02][355714282808374][1 ms][INFO] === Request start === [2025-08-25 11:44:02][355714282808374][1 ms][DEBUG] START check_scloud [2025-08-25 11:44:02][355714282808374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:44:02][355714282808374][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 22915 22779 24732100 230668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:44:02][355714282808374][312 ms][DEBUG] targetPkg: running [2025-08-25 11:44:02][355714282808374][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 11:44:02][355714282808374][312 ms][DEBUG] START check_boot_completed [2025-08-25 11:44:02][355714282808374][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:44:02][355714282808374][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:44:02][355714282808374][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:44:02][355714282808374][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:44:02][355714282808374][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:44:02][355714282808374][405 ms][DEBUG] START check_internet [2025-08-25 11:44:02][355714282808374][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:44:03][355714282808374][671 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=160 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 160.317/160.317/160.317/0.000 ms\n [2025-08-25 11:44:03][355714282808374][671 ms][DEBUG] check_internet: online [2025-08-25 11:44:03][355714282808374][671 ms][DEBUG] END check_internet in 266 ms [2025-08-25 11:44:03][355714282808374][671 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:44:03][355714282808374][671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355714282808374\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9629\"}'\'' -e'"" [2025-08-25 11:44:03][355714282808374][671 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:44:03][355714282808374][671 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355714282808374\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9629\"}'\'' -e'"" [2025-08-25 11:44:07][355714282808374][4717 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c9f0e44-8e4e-43dc-b0a2-ae8f993f280e","id":"QR_8c9f0e44-8e4e-43dc-b0a2-ae8f993f280e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:44:07][355714282808374][4873 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-25 11:44:07][355714282808374][4873 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 11:44:07][355714282808374][4873 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:45:03][350281374239079][0 ms][INFO] === Request start === [2025-08-25 11:45:03][350281374239079][1 ms][DEBUG] START check_scloud [2025-08-25 11:45:03][350281374239079][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:45:03][350281374239079][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 22915 22779 24872488 241516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:45:03][350281374239079][313 ms][DEBUG] targetPkg: running [2025-08-25 11:45:03][350281374239079][313 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 11:45:03][350281374239079][314 ms][DEBUG] START check_boot_completed [2025-08-25 11:45:03][350281374239079][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:45:03][350281374239079][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:45:03][350281374239079][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:45:03][350281374239079][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:45:03][350281374239079][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:45:03][350281374239079][423 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:45:03][350281374239079][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350281374239079\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8905\"}'\'' -e'"" [2025-08-25 11:45:03][350281374239079][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:45:03][350281374239079][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350281374239079\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8905\"}'\'' -e'"" [2025-08-25 11:45:07][350281374239079][4094 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 11:45:07][350281374239079][4094 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-25 11:45:07][350281374239079][4094 ms][WARN] Detected error: Process with pid 22915 either refused to load frida-agent, or terminated during injection [2025-08-25 11:45:07][350281374239079][4094 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 11:45:07][350281374239079][4250 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 11:45:07][350281374239079][4250 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 11:45:07][350281374239079][4250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 11:45:07][350281374239079][4390 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 11:45:07][350281374239079][4391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 11:45:07][350281374239079][4531 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 11:45:09][350281374239079][6546 ms][DEBUG] START check_boot_completed [2025-08-25 11:45:09][350281374239079][6546 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:45:09][350281374239079][6593 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:45:09][350281374239079][6593 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:45:09][350281374239079][6641 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 11:45:09][350281374239079][6641 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 11:45:13][350281374239079][9655 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 11:45:13][350281374239079][9655 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350281374239079\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8905\"}'\'' -e'"" [2025-08-25 11:45:17][350281374239079][13701 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_947a296a-e2ac-43a8-8be6-5eea856e6cce","id":"QR_947a296a-e2ac-43a8-8be6-5eea856e6cce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:45:17][350281374239079][13857 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-25 11:45:17][350281374239079][13857 ms][DEBUG] END runCmdUntilRes#2 in 4202 ms [2025-08-25 11:45:17][350281374239079][13857 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:45:18][355999110115791][0 ms][INFO] === Request start === [2025-08-25 11:45:18][355999110115791][1 ms][DEBUG] START check_scloud [2025-08-25 11:45:18][355999110115791][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:45:19][355999110115791][262 ms][DEBUG] SU: done in 262 ms; outu0_a118 25010 22779 23532604 126108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:45:19][355999110115791][262 ms][DEBUG] targetPkg: running [2025-08-25 11:45:19][355999110115791][262 ms][DEBUG] END check_scloud in 262 ms [2025-08-25 11:45:19][355999110115791][263 ms][DEBUG] START check_boot_completed [2025-08-25 11:45:19][355999110115791][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:45:19][355999110115791][309 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:45:19][355999110115791][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:45:19][355999110115791][387 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 11:45:19][355999110115791][387 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 11:45:19][355999110115791][387 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:45:19][355999110115791][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355999110115791\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9128\"}'\'' -e'"" [2025-08-25 11:45:19][355999110115791][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:45:19][355999110115791][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355999110115791\",\"model\":\"SM-G986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9128\"}'\'' -e'"" [2025-08-25 11:45:22][355999110115791][4011 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b6e13e7-7c3a-479e-8445-cee77e9a2e8b","id":"QR_7b6e13e7-7c3a-479e-8445-cee77e9a2e8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:45:22][355999110115791][4168 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-25 11:45:22][355999110115791][4168 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-25 11:45:22][355999110115791][4168 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:45:25][350637544126217][0 ms][INFO] === Request start === [2025-08-25 11:45:25][350637544126217][1 ms][DEBUG] START check_scloud [2025-08-25 11:45:25][350637544126217][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:45:25][350637544126217][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 25010 22779 23732656 139144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:45:25][350637544126217][245 ms][DEBUG] targetPkg: running [2025-08-25 11:45:25][350637544126217][245 ms][DEBUG] END check_scloud in 244 ms [2025-08-25 11:45:25][350637544126217][245 ms][DEBUG] START check_boot_completed [2025-08-25 11:45:25][350637544126217][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:45:25][350637544126217][291 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:45:25][350637544126217][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:45:25][350637544126217][354 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:45:25][350637544126217][354 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:45:25][350637544126217][354 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:45:25][350637544126217][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544126217\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"S08\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1109\"}'\'' -e'"" [2025-08-25 11:45:25][350637544126217][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:45:25][350637544126217][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544126217\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"S08\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1109\"}'\'' -e'"" [2025-08-25 11:45:29][350637544126217][4290 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69e157e3-a907-469c-9754-ad9f23855734","id":"QR_69e157e3-a907-469c-9754-ad9f23855734","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:45:29][350637544126217][4447 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-25 11:45:29][350637544126217][4447 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-25 11:45:29][350637544126217][4447 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:45:31][353762110981048][0 ms][INFO] === Request start === [2025-08-25 11:45:31][353762110981048][1 ms][DEBUG] START check_scloud [2025-08-25 11:45:31][353762110981048][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:45:31][353762110981048][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 25010 22779 23872020 150820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:45:31][353762110981048][311 ms][DEBUG] targetPkg: running [2025-08-25 11:45:31][353762110981048][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 11:45:31][353762110981048][311 ms][DEBUG] START check_boot_completed [2025-08-25 11:45:31][353762110981048][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:45:31][353762110981048][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:45:31][353762110981048][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:45:31][353762110981048][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:45:31][353762110981048][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:45:31][353762110981048][404 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:45:31][353762110981048][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353762110981048\",\"model\":\"SM-N971N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5770\"}'\'' -e'"" [2025-08-25 11:45:31][353762110981048][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:45:31][353762110981048][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353762110981048\",\"model\":\"SM-N971N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5770\"}'\'' -e'"" [2025-08-25 11:45:35][353762110981048][4106 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b75031e2-d4f3-40bf-ac8f-a6fedf32e619","id":"QR_b75031e2-d4f3-40bf-ac8f-a6fedf32e619","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:45:35][353762110981048][4263 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-25 11:45:35][353762110981048][4263 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 11:45:35][353762110981048][4263 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:46:03][352060481042255][1 ms][INFO] === Request start === [2025-08-25 11:46:03][352060481042255][1 ms][DEBUG] START check_scloud [2025-08-25 11:46:03][352060481042255][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:46:03][352060481042255][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 25010 22779 23903580 162552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:46:03][352060481042255][298 ms][DEBUG] targetPkg: running [2025-08-25 11:46:03][352060481042255][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 11:46:03][352060481042255][299 ms][DEBUG] START check_boot_completed [2025-08-25 11:46:03][352060481042255][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:46:03][352060481042255][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:46:03][352060481042255][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:46:03][352060481042255][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:46:03][352060481042255][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:46:03][352060481042255][392 ms][DEBUG] START check_internet [2025-08-25 11:46:03][352060481042255][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:46:03][352060481042255][705 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.181/199.181/199.181/0.000 ms\n [2025-08-25 11:46:03][352060481042255][705 ms][DEBUG] check_internet: online [2025-08-25 11:46:03][352060481042255][705 ms][DEBUG] END check_internet in 313 ms [2025-08-25 11:46:03][352060481042255][705 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:46:03][352060481042255][705 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060481042255\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4220\"}'\'' -e'"" [2025-08-25 11:46:03][352060481042255][705 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:46:03][352060481042255][705 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060481042255\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4220\"}'\'' -e'"" [2025-08-25 11:46:07][352060481042255][4579 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9779d14b-90a4-4dce-97b9-5952df6859f8","id":"QR_9779d14b-90a4-4dce-97b9-5952df6859f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:46:07][352060481042255][4735 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-25 11:46:07][352060481042255][4735 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-25 11:46:07][352060481042255][4735 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:46:09][355088850637774][0 ms][INFO] === Request start === [2025-08-25 11:46:09][355088850637774][0 ms][DEBUG] START check_scloud [2025-08-25 11:46:09][355088850637774][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:46:09][355088850637774][283 ms][DEBUG] SU: done in 283 ms; outu0_a118 25010 22779 24053412 173176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:46:09][355088850637774][283 ms][DEBUG] targetPkg: running [2025-08-25 11:46:09][355088850637774][283 ms][DEBUG] END check_scloud in 283 ms [2025-08-25 11:46:09][355088850637774][283 ms][DEBUG] START check_boot_completed [2025-08-25 11:46:09][355088850637774][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:46:09][355088850637774][330 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:46:09][355088850637774][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:46:09][355088850637774][392 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 11:46:09][355088850637774][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:46:09][355088850637774][392 ms][DEBUG] START check_internet [2025-08-25 11:46:09][355088850637774][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:46:09][355088850637774][658 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.345/139.345/139.345/0.000 ms\n [2025-08-25 11:46:09][355088850637774][658 ms][DEBUG] check_internet: online [2025-08-25 11:46:09][355088850637774][658 ms][DEBUG] END check_internet in 266 ms [2025-08-25 11:46:09][355088850637774][658 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:46:09][355088850637774][658 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088850637774\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9819\"}'\'' -e'"" [2025-08-25 11:46:09][355088850637774][658 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:46:09][355088850637774][658 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088850637774\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9819\"}'\'' -e'"" [2025-08-25 11:46:13][355088850637774][4407 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e64d3e1-fe68-456d-bac7-b9fd48263a67","id":"QR_1e64d3e1-fe68-456d-bac7-b9fd48263a67","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:46:13][355088850637774][4563 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=3343 [2025-08-25 11:46:13][355088850637774][4563 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 11:46:13][355088850637774][4563 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:47:02][355755473090751][0 ms][INFO] === Request start === [2025-08-25 11:47:02][355755473090751][1 ms][DEBUG] START check_scloud [2025-08-25 11:47:02][355755473090751][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:47:03][355755473090751][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 25010 22779 24169188 185184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:47:03][355755473090751][307 ms][DEBUG] targetPkg: running [2025-08-25 11:47:03][355755473090751][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 11:47:03][355755473090751][307 ms][DEBUG] START check_boot_completed [2025-08-25 11:47:03][355755473090751][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:47:03][355755473090751][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:47:03][355755473090751][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:47:03][355755473090751][401 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 11:47:03][355755473090751][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 11:47:03][355755473090751][402 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:47:03][355755473090751][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755473090751\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6074\"}'\'' -e'"" [2025-08-25 11:47:03][355755473090751][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:47:03][355755473090751][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755473090751\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6074\"}'\'' -e'"" [2025-08-25 11:47:06][355755473090751][4181 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 11:47:07][355755473090751][4337 ms][DEBUG] proc_open done in 3935 ms; code=255; res.len=107 [2025-08-25 11:47:07][355755473090751][4337 ms][DEBUG] END runCmdUntilRes#1 in 3935 ms [2025-08-25 11:47:07][355755473090751][4337 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 11:47:07][][0 ms][INFO] === Request start === [2025-08-25 11:47:07][][1 ms][DEBUG] START check_scloud [2025-08-25 11:47:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:47:07][][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 25010 22779 24328172 196748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:47:07][][312 ms][DEBUG] targetPkg: running [2025-08-25 11:47:07][][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 11:47:07][][312 ms][DEBUG] START check_boot_completed [2025-08-25 11:47:07][][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:47:07][][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:47:07][][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:47:07][][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:47:07][][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:47:07][][406 ms][DEBUG] rawBody.length=1129 [2025-08-25 11:47:07][][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW806513K\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2257\"}'\'' -e'"" [2025-08-25 11:47:07][][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:47:07][][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW806513K\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2257\"}'\'' -e'"" [2025-08-25 11:47:11][][3889 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 11:47:11][][4045 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=107 [2025-08-25 11:47:11][][4045 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-25 11:47:11][][4045 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 11:48:03][354505624994794][0 ms][INFO] === Request start === [2025-08-25 11:48:03][354505624994794][1 ms][DEBUG] START check_scloud [2025-08-25 11:48:03][354505624994794][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:48:03][354505624994794][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 25010 22779 24456736 208296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:48:03][354505624994794][266 ms][DEBUG] targetPkg: running [2025-08-25 11:48:03][354505624994794][266 ms][DEBUG] END check_scloud in 266 ms [2025-08-25 11:48:03][354505624994794][266 ms][DEBUG] START check_boot_completed [2025-08-25 11:48:03][354505624994794][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:48:04][354505624994794][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:48:04][354505624994794][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:48:04][354505624994794][375 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:48:04][354505624994794][376 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:48:04][354505624994794][376 ms][DEBUG] START check_internet [2025-08-25 11:48:04][354505624994794][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:48:04][354505624994794][860 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.562/202.562/202.562/0.000 ms\n [2025-08-25 11:48:04][354505624994794][860 ms][DEBUG] check_internet: online [2025-08-25 11:48:04][354505624994794][860 ms][DEBUG] END check_internet in 484 ms [2025-08-25 11:48:04][354505624994794][860 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:48:04][354505624994794][860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505624994794\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4039\"}'\'' -e'"" [2025-08-25 11:48:04][354505624994794][860 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:48:04][354505624994794][860 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505624994794\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4039\"}'\'' -e'"" [2025-08-25 11:48:08][354505624994794][4984 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1033877d-31b4-412e-8615-e6dc52db5f8d","id":"QR_1033877d-31b4-412e-8615-e6dc52db5f8d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:48:08][354505624994794][5140 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-25 11:48:08][354505624994794][5140 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-25 11:48:08][354505624994794][5140 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:49:02][350250416245063][1 ms][INFO] === Request start === [2025-08-25 11:49:02][350250416245063][1 ms][DEBUG] START check_scloud [2025-08-25 11:49:02][350250416245063][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:49:02][350250416245063][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 25010 22779 24586884 220364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:49:02][350250416245063][252 ms][DEBUG] targetPkg: running [2025-08-25 11:49:02][350250416245063][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-25 11:49:02][350250416245063][252 ms][DEBUG] START check_boot_completed [2025-08-25 11:49:02][350250416245063][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:49:02][350250416245063][315 ms][DEBUG] ADB: done in 62 ms; out [2025-08-25 11:49:02][350250416245063][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:49:02][350250416245063][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:49:02][350250416245063][361 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:49:02][350250416245063][361 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:49:02][350250416245063][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250416245063\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7925\"}'\'' -e'"" [2025-08-25 11:49:02][350250416245063][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:49:02][350250416245063][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250416245063\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7925\"}'\'' -e'"" [2025-08-25 11:49:06][350250416245063][4142 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 11:49:06][350250416245063][4298 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=107 [2025-08-25 11:49:06][350250416245063][4298 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-25 11:49:06][350250416245063][4298 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 11:49:06][][0 ms][INFO] === Request start === [2025-08-25 11:49:06][][1 ms][DEBUG] START check_scloud [2025-08-25 11:49:06][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:49:07][][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 25010 22779 24719116 232124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:49:07][][245 ms][DEBUG] targetPkg: running [2025-08-25 11:49:07][][245 ms][DEBUG] END check_scloud in 244 ms [2025-08-25 11:49:07][][245 ms][DEBUG] START check_boot_completed [2025-08-25 11:49:07][][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:49:07][][289 ms][DEBUG] ADB: done in 44 ms; out [2025-08-25 11:49:07][][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:49:07][][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:49:07][][336 ms][DEBUG] END check_boot_completed in 91 ms [2025-08-25 11:49:07][][336 ms][DEBUG] rawBody.length=1129 [2025-08-25 11:49:07][][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXA1AFN9W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6769\"}'\'' -e'"" [2025-08-25 11:49:07][][336 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:49:07][][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXA1AFN9W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6769\"}'\'' -e'"" [2025-08-25 11:49:11][][4194 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 11:49:11][][4351 ms][DEBUG] proc_open done in 4015 ms; code=255; res.len=107 [2025-08-25 11:49:11][][4351 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-08-25 11:49:11][][4351 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 11:49:11][355858111287662][0 ms][INFO] === Request start === [2025-08-25 11:49:11][355858111287662][1 ms][DEBUG] START check_scloud [2025-08-25 11:49:11][355858111287662][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:49:12][355858111287662][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 25010 22779 24853524 244056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:49:12][355858111287662][312 ms][DEBUG] targetPkg: running [2025-08-25 11:49:12][355858111287662][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 11:49:12][355858111287662][312 ms][DEBUG] START check_boot_completed [2025-08-25 11:49:12][355858111287662][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:49:12][355858111287662][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:49:12][355858111287662][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:49:12][355858111287662][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:49:12][355858111287662][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 11:49:12][355858111287662][390 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:49:12][355858111287662][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355858111287662\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1456\"}'\'' -e'"" [2025-08-25 11:49:12][355858111287662][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:49:12][355858111287662][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355858111287662\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1456\"}'\'' -e'"" [2025-08-25 11:49:15][355858111287662][4014 ms][DEBUG] proc_open done in 3624 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 11:49:15][355858111287662][4014 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-25 11:49:15][355858111287662][4014 ms][WARN] Detected error: Process with pid 25010 either refused to load frida-agent, or terminated during injection [2025-08-25 11:49:15][355858111287662][4014 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 11:49:16][355858111287662][4154 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 11:49:16][355858111287662][4155 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 11:49:16][355858111287662][4155 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 11:49:16][355858111287662][4311 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 11:49:16][355858111287662][4311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 11:49:16][355858111287662][4467 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 11:49:18][355858111287662][6482 ms][DEBUG] START check_boot_completed [2025-08-25 11:49:18][355858111287662][6482 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:49:18][355858111287662][6529 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:49:18][355858111287662][6529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:49:18][355858111287662][6577 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 11:49:18][355858111287662][6577 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-25 11:49:21][355858111287662][9590 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 11:49:21][355858111287662][9591 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355858111287662\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1456\"}'\'' -e'"" [2025-08-25 11:49:25][355858111287662][13121 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c59fe82-8f6e-40c4-8748-1274a31ff70a","id":"QR_0c59fe82-8f6e-40c4-8748-1274a31ff70a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:49:25][355858111287662][13277 ms][DEBUG] proc_open done in 3687 ms; code=255; res.len=3343 [2025-08-25 11:49:25][355858111287662][13277 ms][DEBUG] END runCmdUntilRes#2 in 3687 ms [2025-08-25 11:49:25][355858111287662][13277 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:50:03][355755470526757][0 ms][INFO] === Request start === [2025-08-25 11:50:03][355755470526757][1 ms][DEBUG] START check_scloud [2025-08-25 11:50:03][355755470526757][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:50:04][355755470526757][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 26437 22779 23455892 128624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:50:04][355755470526757][311 ms][DEBUG] targetPkg: running [2025-08-25 11:50:04][355755470526757][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 11:50:04][355755470526757][311 ms][DEBUG] START check_boot_completed [2025-08-25 11:50:04][355755470526757][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:50:04][355755470526757][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:50:04][355755470526757][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:50:04][355755470526757][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:50:04][355755470526757][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:50:04][355755470526757][420 ms][DEBUG] START check_internet [2025-08-25 11:50:04][355755470526757][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:50:04][355755470526757][779 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.042/242.042/242.042/0.000 ms\n [2025-08-25 11:50:04][355755470526757][779 ms][DEBUG] check_internet: online [2025-08-25 11:50:04][355755470526757][779 ms][DEBUG] END check_internet in 359 ms [2025-08-25 11:50:04][355755470526757][780 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:50:04][355755470526757][780 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755470526757\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1050\"}'\'' -e'"" [2025-08-25 11:50:04][355755470526757][780 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:50:04][355755470526757][780 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755470526757\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1050\"}'\'' -e'"" [2025-08-25 11:50:08][355755470526757][4700 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f5f5094-30e4-4d39-a298-fb2bcdbb84eb","id":"QR_9f5f5094-30e4-4d39-a298-fb2bcdbb84eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:50:08][355755470526757][4856 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-25 11:50:08][355755470526757][4856 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-25 11:50:08][355755470526757][4856 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:51:03][357962502603509][1 ms][INFO] === Request start === [2025-08-25 11:51:03][357962502603509][1 ms][DEBUG] START check_scloud [2025-08-25 11:51:03][357962502603509][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:51:03][357962502603509][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 26437 22779 23569720 138840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:51:03][357962502603509][308 ms][DEBUG] targetPkg: running [2025-08-25 11:51:03][357962502603509][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 11:51:03][357962502603509][308 ms][DEBUG] START check_boot_completed [2025-08-25 11:51:03][357962502603509][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:51:03][357962502603509][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:51:03][357962502603509][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:51:03][357962502603509][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:51:03][357962502603509][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 11:51:03][357962502603509][386 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:51:03][357962502603509][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502603509\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9745\"}'\'' -e'"" [2025-08-25 11:51:03][357962502603509][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:51:03][357962502603509][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962502603509\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9745\"}'\'' -e'"" [2025-08-25 11:51:07][357962502603509][4244 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd4d991c-cf4f-4e70-a137-8d4a2a5943fa","id":"QR_bd4d991c-cf4f-4e70-a137-8d4a2a5943fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:51:07][357962502603509][4400 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-25 11:51:07][357962502603509][4400 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-08-25 11:51:07][357962502603509][4401 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:51:09][350900922267544][0 ms][INFO] === Request start === [2025-08-25 11:51:09][350900922267544][0 ms][DEBUG] START check_scloud [2025-08-25 11:51:09][350900922267544][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:51:09][350900922267544][246 ms][DEBUG] SU: done in 246 ms; outu0_a118 26437 22779 23704000 150588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:51:09][350900922267544][246 ms][DEBUG] targetPkg: running [2025-08-25 11:51:09][350900922267544][246 ms][DEBUG] END check_scloud in 246 ms [2025-08-25 11:51:09][350900922267544][246 ms][DEBUG] START check_boot_completed [2025-08-25 11:51:09][350900922267544][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:51:09][350900922267544][292 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:51:09][350900922267544][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:51:09][350900922267544][339 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:51:09][350900922267544][339 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:51:09][350900922267544][339 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:51:09][350900922267544][339 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900922267544\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6064\"}'\'' -e'"" [2025-08-25 11:51:09][350900922267544][340 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:51:09][350900922267544][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900922267544\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6064\"}'\'' -e'"" [2025-08-25 11:51:13][350900922267544][4385 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6861945d-0037-4f7a-a783-309e0714d845","id":"QR_6861945d-0037-4f7a-a783-309e0714d845","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:51:13][350900922267544][4541 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-25 11:51:13][350900922267544][4541 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 11:51:13][350900922267544][4541 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:52:02][356467781124939][0 ms][INFO] === Request start === [2025-08-25 11:52:02][356467781124939][1 ms][DEBUG] START check_scloud [2025-08-25 11:52:02][356467781124939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:52:02][356467781124939][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 26437 22779 23790992 161796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:52:02][356467781124939][301 ms][DEBUG] targetPkg: running [2025-08-25 11:52:02][356467781124939][301 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 11:52:02][356467781124939][301 ms][DEBUG] START check_boot_completed [2025-08-25 11:52:02][356467781124939][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:52:03][356467781124939][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:52:03][356467781124939][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:52:03][356467781124939][397 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 11:52:03][356467781124939][397 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-25 11:52:03][356467781124939][397 ms][DEBUG] START check_internet [2025-08-25 11:52:03][356467781124939][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:52:03][356467781124939][770 ms][DEBUG] SU: done in 373 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.113/257.113/257.113/0.000 ms\n [2025-08-25 11:52:03][356467781124939][770 ms][DEBUG] check_internet: online [2025-08-25 11:52:03][356467781124939][770 ms][DEBUG] END check_internet in 373 ms [2025-08-25 11:52:03][356467781124939][770 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:52:03][356467781124939][770 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356467781124939\",\"model\":\"SM-X616B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7807\"}'\'' -e'"" [2025-08-25 11:52:03][356467781124939][770 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:52:03][356467781124939][770 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356467781124939\",\"model\":\"SM-X616B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7807\"}'\'' -e'"" [2025-08-25 11:52:07][356467781124939][4722 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12d2e4ec-c376-4b36-96f8-2445010ea4af","id":"QR_12d2e4ec-c376-4b36-96f8-2445010ea4af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:52:07][356467781124939][4878 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-25 11:52:07][356467781124939][4878 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-25 11:52:07][356467781124939][4878 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:53:03][352665182734651][0 ms][INFO] === Request start === [2025-08-25 11:53:03][352665182734651][1 ms][DEBUG] START check_scloud [2025-08-25 11:53:03][352665182734651][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:53:04][352665182734651][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 26437 22779 23947892 173844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:53:04][352665182734651][319 ms][DEBUG] targetPkg: running [2025-08-25 11:53:04][352665182734651][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 11:53:04][352665182734651][319 ms][DEBUG] START check_boot_completed [2025-08-25 11:53:04][352665182734651][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:53:04][352665182734651][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:53:04][352665182734651][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:53:04][352665182734651][414 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 11:53:04][352665182734651][414 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 11:53:04][352665182734651][414 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:53:04][352665182734651][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665182734651\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5021\"}'\'' -e'"" [2025-08-25 11:53:04][352665182734651][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:53:04][352665182734651][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665182734651\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5021\"}'\'' -e'"" [2025-08-25 11:53:08][352665182734651][4630 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2cb35156-ea15-4404-91ca-65d9d2aec9b2","id":"QR_2cb35156-ea15-4404-91ca-65d9d2aec9b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:53:08][352665182734651][4786 ms][DEBUG] proc_open done in 4371 ms; code=255; res.len=3343 [2025-08-25 11:53:08][352665182734651][4786 ms][DEBUG] END runCmdUntilRes#1 in 4372 ms [2025-08-25 11:53:08][352665182734651][4786 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:53:11][352698472651202][0 ms][INFO] === Request start === [2025-08-25 11:53:11][352698472651202][0 ms][DEBUG] START check_scloud [2025-08-25 11:53:11][352698472651202][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:53:11][352698472651202][246 ms][DEBUG] SU: done in 246 ms; outu0_a118 26437 22779 24074108 184724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:53:11][352698472651202][246 ms][DEBUG] targetPkg: running [2025-08-25 11:53:11][352698472651202][246 ms][DEBUG] END check_scloud in 246 ms [2025-08-25 11:53:11][352698472651202][246 ms][DEBUG] START check_boot_completed [2025-08-25 11:53:11][352698472651202][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:53:11][352698472651202][292 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 11:53:11][352698472651202][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:53:11][352698472651202][339 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:53:11][352698472651202][339 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 11:53:11][352698472651202][339 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:53:11][352698472651202][339 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698472651202\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3963\"}'\'' -e'"" [2025-08-25 11:53:11][352698472651202][339 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:53:11][352698472651202][339 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698472651202\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3963\"}'\'' -e'"" [2025-08-25 11:53:15][352698472651202][4244 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1aa5716a-caf0-4135-841f-e0bbe73fd530","id":"QR_1aa5716a-caf0-4135-841f-e0bbe73fd530","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:53:15][352698472651202][4400 ms][DEBUG] proc_open done in 4062 ms; code=255; res.len=3343 [2025-08-25 11:53:15][352698472651202][4401 ms][DEBUG] END runCmdUntilRes#1 in 4062 ms [2025-08-25 11:53:15][352698472651202][4401 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:54:03][353684145497487][0 ms][INFO] === Request start === [2025-08-25 11:54:03][353684145497487][1 ms][DEBUG] START check_scloud [2025-08-25 11:54:03][353684145497487][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:54:03][353684145497487][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 26437 22779 24220668 196700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:54:03][353684145497487][279 ms][DEBUG] targetPkg: running [2025-08-25 11:54:03][353684145497487][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-25 11:54:03][353684145497487][279 ms][DEBUG] START check_boot_completed [2025-08-25 11:54:03][353684145497487][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:54:03][353684145497487][326 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:54:03][353684145497487][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:54:03][353684145497487][388 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:54:03][353684145497487][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 11:54:03][353684145497487][388 ms][DEBUG] START check_internet [2025-08-25 11:54:03][353684145497487][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:54:04][353684145497487][935 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.634/201.634/201.634/0.000 ms\n [2025-08-25 11:54:04][353684145497487][936 ms][DEBUG] check_internet: online [2025-08-25 11:54:04][353684145497487][936 ms][DEBUG] END check_internet in 547 ms [2025-08-25 11:54:04][353684145497487][936 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:54:04][353684145497487][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145497487\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5953\"}'\'' -e'"" [2025-08-25 11:54:04][353684145497487][936 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:54:04][353684145497487][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145497487\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5953\"}'\'' -e'"" [2025-08-25 11:54:08][353684145497487][4825 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c91230f-0472-44ae-865b-16b2f12ffcd9","id":"QR_9c91230f-0472-44ae-865b-16b2f12ffcd9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:54:08][353684145497487][4981 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-25 11:54:08][353684145497487][4981 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-25 11:54:08][353684145497487][4981 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:54:09][355744471355283][0 ms][INFO] === Request start === [2025-08-25 11:54:09][355744471355283][1 ms][DEBUG] START check_scloud [2025-08-25 11:54:09][355744471355283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:54:10][355744471355283][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 26437 22779 24391940 207672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:54:10][355744471355283][295 ms][DEBUG] targetPkg: running [2025-08-25 11:54:10][355744471355283][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-25 11:54:10][355744471355283][295 ms][DEBUG] START check_boot_completed [2025-08-25 11:54:10][355744471355283][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:54:10][355744471355283][340 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 11:54:10][355744471355283][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:54:10][355744471355283][402 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 11:54:10][355744471355283][402 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-25 11:54:10][355744471355283][402 ms][DEBUG] START check_internet [2025-08-25 11:54:10][355744471355283][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:54:10][355744471355283][668 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=147 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 147.575/147.575/147.575/0.000 ms\n [2025-08-25 11:54:10][355744471355283][668 ms][DEBUG] check_internet: online [2025-08-25 11:54:10][355744471355283][668 ms][DEBUG] END check_internet in 266 ms [2025-08-25 11:54:10][355744471355283][668 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:54:10][355744471355283][668 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744471355283\",\"model\":\"SM-E556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2541\"}'\'' -e'"" [2025-08-25 11:54:10][355744471355283][668 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:54:10][355744471355283][668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744471355283\",\"model\":\"SM-E556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2541\"}'\'' -e'"" [2025-08-25 11:54:14][355744471355283][4823 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bed082a7-710d-478f-ada5-a14cf90e7eab","id":"QR_bed082a7-710d-478f-ada5-a14cf90e7eab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:54:14][355744471355283][4979 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 11:54:14][355744471355283][4980 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 11:54:14][355744471355283][4980 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:55:03][350938288803304][0 ms][INFO] === Request start === [2025-08-25 11:55:03][350938288803304][1 ms][DEBUG] START check_scloud [2025-08-25 11:55:03][350938288803304][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:55:03][350938288803304][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 26437 22779 24525152 219052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:55:03][350938288803304][306 ms][DEBUG] targetPkg: running [2025-08-25 11:55:03][350938288803304][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 11:55:03][350938288803304][306 ms][DEBUG] START check_boot_completed [2025-08-25 11:55:03][350938288803304][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:55:03][350938288803304][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:55:03][350938288803304][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:55:04][350938288803304][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:55:04][350938288803304][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 11:55:04][350938288803304][399 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:55:04][350938288803304][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938288803304\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1161\"}'\'' -e'"" [2025-08-25 11:55:04][350938288803304][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:55:04][350938288803304][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938288803304\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1161\"}'\'' -e'"" [2025-08-25 11:55:08][350938288803304][4960 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67e93751-a1dd-452e-83db-74c4778a36c7","id":"QR_67e93751-a1dd-452e-83db-74c4778a36c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:55:08][350938288803304][5117 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-08-25 11:55:08][350938288803304][5117 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-08-25 11:55:08][350938288803304][5117 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:55:11][355647440812187][0 ms][INFO] === Request start === [2025-08-25 11:55:11][355647440812187][1 ms][DEBUG] START check_scloud [2025-08-25 11:55:11][355647440812187][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:55:11][355647440812187][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 26437 22779 24700520 231000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:55:11][355647440812187][292 ms][DEBUG] targetPkg: running [2025-08-25 11:55:11][355647440812187][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-25 11:55:11][355647440812187][292 ms][DEBUG] START check_boot_completed [2025-08-25 11:55:11][355647440812187][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:55:11][355647440812187][338 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:55:11][355647440812187][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:55:11][355647440812187][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:55:11][355647440812187][385 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:55:11][355647440812187][385 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:55:11][355647440812187][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355647440812187\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5275\"}'\'' -e'"" [2025-08-25 11:55:11][355647440812187][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:55:11][355647440812187][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355647440812187\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5275\"}'\'' -e'"" [2025-08-25 11:55:15][355647440812187][4446 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9688e1b-6d7a-4d15-819b-7b559a0b8572","id":"QR_b9688e1b-6d7a-4d15-819b-7b559a0b8572","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:55:15][355647440812187][4602 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-25 11:55:15][355647440812187][4602 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-25 11:55:15][355647440812187][4602 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:56:03][350637542683896][1 ms][INFO] === Request start === [2025-08-25 11:56:03][350637542683896][1 ms][DEBUG] START check_scloud [2025-08-25 11:56:03][350637542683896][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:56:03][350637542683896][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 26437 22779 24821548 241824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:56:03][350637542683896][321 ms][DEBUG] targetPkg: running [2025-08-25 11:56:03][350637542683896][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-25 11:56:03][350637542683896][321 ms][DEBUG] START check_boot_completed [2025-08-25 11:56:03][350637542683896][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:56:03][350637542683896][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:56:03][350637542683896][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:56:03][350637542683896][414 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:56:03][350637542683896][414 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 11:56:03][350637542683896][415 ms][DEBUG] START check_internet [2025-08-25 11:56:03][350637542683896][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:56:03][350637542683896][789 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.611/232.611/232.611/0.000 ms\n [2025-08-25 11:56:03][350637542683896][789 ms][DEBUG] check_internet: online [2025-08-25 11:56:03][350637542683896][789 ms][DEBUG] END check_internet in 375 ms [2025-08-25 11:56:03][350637542683896][789 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:56:03][350637542683896][789 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542683896\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7602\"}'\'' -e'"" [2025-08-25 11:56:03][350637542683896][789 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:56:03][350637542683896][790 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542683896\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7602\"}'\'' -e'"" [2025-08-25 11:56:07][350637542683896][4554 ms][DEBUG] proc_open done in 3764 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 11:56:07][350637542683896][4554 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-08-25 11:56:07][350637542683896][4554 ms][WARN] Detected error: Process with pid 26437 either refused to load frida-agent, or terminated during injection [2025-08-25 11:56:07][350637542683896][4554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 11:56:07][350637542683896][4726 ms][DEBUG] SU: done in 171 ms; out [2025-08-25 11:56:07][350637542683896][4726 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 11:56:07][350637542683896][4726 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 11:56:08][350637542683896][4866 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 11:56:08][350637542683896][4866 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 11:56:08][350637542683896][5071 ms][DEBUG] SU: done in 205 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 11:56:10][350637542683896][7084 ms][DEBUG] START check_boot_completed [2025-08-25 11:56:10][350637542683896][7084 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:56:10][350637542683896][7131 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 11:56:10][350637542683896][7131 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:56:10][350637542683896][7178 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:56:10][350637542683896][7178 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 11:56:13][350637542683896][10193 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 11:56:13][350637542683896][10193 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542683896\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7602\"}'\'' -e'"" [2025-08-25 11:56:17][350637542683896][14645 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eefd1a10-0294-4042-a5b0-2b24dc115451","id":"QR_eefd1a10-0294-4042-a5b0-2b24dc115451","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:56:18][350637542683896][14801 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-08-25 11:56:18][350637542683896][14801 ms][DEBUG] END runCmdUntilRes#2 in 4608 ms [2025-08-25 11:56:18][350637542683896][14801 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:56:19][352053265843451][0 ms][INFO] === Request start === [2025-08-25 11:56:19][352053265843451][1 ms][DEBUG] START check_scloud [2025-08-25 11:56:19][352053265843451][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:56:19][352053265843451][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 28202 22779 23531676 125920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:56:19][352053265843451][261 ms][DEBUG] targetPkg: running [2025-08-25 11:56:19][352053265843451][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-25 11:56:19][352053265843451][261 ms][DEBUG] START check_boot_completed [2025-08-25 11:56:19][352053265843451][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:56:19][352053265843451][292 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 11:56:19][352053265843451][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:56:19][352053265843451][339 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:56:19][352053265843451][339 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 11:56:19][352053265843451][339 ms][DEBUG] START check_internet [2025-08-25 11:56:19][352053265843451][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:56:20][352053265843451][683 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.343/234.343/234.343/0.000 ms\n [2025-08-25 11:56:20][352053265843451][683 ms][DEBUG] check_internet: online [2025-08-25 11:56:20][352053265843451][683 ms][DEBUG] END check_internet in 344 ms [2025-08-25 11:56:20][352053265843451][683 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:56:20][352053265843451][683 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053265843451\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4297\"}'\'' -e'"" [2025-08-25 11:56:20][352053265843451][683 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:56:20][352053265843451][683 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053265843451\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4297\"}'\'' -e'"" [2025-08-25 11:56:23][352053265843451][4322 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a4a42a5-33f3-4d19-984f-4fab51baf9cf","id":"QR_6a4a42a5-33f3-4d19-984f-4fab51baf9cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:56:23][352053265843451][4479 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-08-25 11:56:23][352053265843451][4479 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-08-25 11:56:23][352053265843451][4479 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:58:02][355857115449211][0 ms][INFO] === Request start === [2025-08-25 11:58:02][355857115449211][1 ms][DEBUG] START check_scloud [2025-08-25 11:58:02][355857115449211][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:58:03][355857115449211][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 28202 22779 23589972 139108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:58:03][355857115449211][256 ms][DEBUG] targetPkg: running [2025-08-25 11:58:03][355857115449211][256 ms][DEBUG] END check_scloud in 256 ms [2025-08-25 11:58:03][355857115449211][256 ms][DEBUG] START check_boot_completed [2025-08-25 11:58:03][355857115449211][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:58:03][355857115449211][302 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:58:03][355857115449211][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:58:03][355857115449211][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 11:58:03][355857115449211][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 11:58:03][355857115449211][349 ms][DEBUG] START check_internet [2025-08-25 11:58:03][355857115449211][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 11:58:03][355857115449211][818 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.203/201.203/201.203/0.000 ms\n [2025-08-25 11:58:03][355857115449211][818 ms][DEBUG] check_internet: online [2025-08-25 11:58:03][355857115449211][818 ms][DEBUG] END check_internet in 469 ms [2025-08-25 11:58:03][355857115449211][818 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:58:03][355857115449211][818 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857115449211\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2652\"}'\'' -e'"" [2025-08-25 11:58:03][355857115449211][818 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:58:03][355857115449211][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857115449211\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2652\"}'\'' -e'"" [2025-08-25 11:58:07][355857115449211][4817 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83c659fa-63b8-4820-abe2-214ad3dbe098","id":"QR_83c659fa-63b8-4820-abe2-214ad3dbe098","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:58:07][355857115449211][4973 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-08-25 11:58:07][355857115449211][4973 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-25 11:58:07][355857115449211][4973 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 11:59:02][351681597295114][1 ms][INFO] === Request start === [2025-08-25 11:59:02][351681597295114][1 ms][DEBUG] START check_scloud [2025-08-25 11:59:02][351681597295114][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 11:59:03][351681597295114][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 28202 22779 23753920 151396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 11:59:03][351681597295114][306 ms][DEBUG] targetPkg: running [2025-08-25 11:59:03][351681597295114][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 11:59:03][351681597295114][306 ms][DEBUG] START check_boot_completed [2025-08-25 11:59:03][351681597295114][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 11:59:03][351681597295114][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 11:59:03][351681597295114][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 11:59:03][351681597295114][401 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 11:59:03][351681597295114][401 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 11:59:03][351681597295114][401 ms][DEBUG] rawBody.length=1148 [2025-08-25 11:59:03][351681597295114][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681597295114\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5170\"}'\'' -e'"" [2025-08-25 11:59:03][351681597295114][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 11:59:03][351681597295114][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681597295114\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5170\"}'\'' -e'"" [2025-08-25 11:59:07][351681597295114][4383 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a580a607-8a1a-4908-acf3-8f44d9e91d4a","id":"QR_a580a607-8a1a-4908-acf3-8f44d9e91d4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 11:59:07][351681597295114][4539 ms][DEBUG] proc_open done in 4138 ms; code=255; res.len=3343 [2025-08-25 11:59:07][351681597295114][4539 ms][DEBUG] END runCmdUntilRes#1 in 4138 ms [2025-08-25 11:59:07][351681597295114][4539 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:00:04][351477977012710][0 ms][INFO] === Request start === [2025-08-25 12:00:04][351477977012710][1 ms][DEBUG] START check_scloud [2025-08-25 12:00:04][351477977012710][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:00:05][351477977012710][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 28202 22779 23907684 162688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:00:05][351477977012710][284 ms][DEBUG] targetPkg: running [2025-08-25 12:00:05][351477977012710][284 ms][DEBUG] END check_scloud in 284 ms [2025-08-25 12:00:05][351477977012710][284 ms][DEBUG] START check_boot_completed [2025-08-25 12:00:05][351477977012710][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:00:05][351477977012710][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:00:05][351477977012710][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:00:05][351477977012710][440 ms][DEBUG] SU: done in 109 ms; out [2025-08-25 12:00:05][351477977012710][440 ms][DEBUG] END check_boot_completed in 156 ms [2025-08-25 12:00:05][351477977012710][440 ms][DEBUG] START check_internet [2025-08-25 12:00:05][351477977012710][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:00:05][351477977012710][1018 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.433/201.433/201.433/0.000 ms\n [2025-08-25 12:00:05][351477977012710][1018 ms][DEBUG] check_internet: online [2025-08-25 12:00:05][351477977012710][1018 ms][DEBUG] END check_internet in 578 ms [2025-08-25 12:00:05][351477977012710][1018 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:00:05][351477977012710][1018 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477977012710\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2203\"}'\'' -e'"" [2025-08-25 12:00:05][351477977012710][1018 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:00:05][351477977012710][1018 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477977012710\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2203\"}'\'' -e'"" [2025-08-25 12:00:09][351477977012710][5032 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ced731d-4e66-40be-b8b0-29457b32abee","id":"QR_8ced731d-4e66-40be-b8b0-29457b32abee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:00:09][351477977012710][5189 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-25 12:00:09][351477977012710][5189 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-25 12:00:09][351477977012710][5189 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:00:12][356660712174128][0 ms][INFO] === Request start === [2025-08-25 12:00:12][356660712174128][1 ms][DEBUG] START check_scloud [2025-08-25 12:00:12][356660712174128][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:00:12][356660712174128][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 28202 22779 24069604 173316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:00:12][356660712174128][303 ms][DEBUG] targetPkg: running [2025-08-25 12:00:12][356660712174128][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 12:00:12][356660712174128][303 ms][DEBUG] START check_boot_completed [2025-08-25 12:00:12][356660712174128][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:00:12][356660712174128][348 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 12:00:12][356660712174128][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:00:13][356660712174128][426 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 12:00:13][356660712174128][426 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-25 12:00:13][356660712174128][426 ms][DEBUG] START check_internet [2025-08-25 12:00:13][356660712174128][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:00:13][356660712174128][754 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.936/190.936/190.936/0.000 ms\n [2025-08-25 12:00:13][356660712174128][754 ms][DEBUG] check_internet: online [2025-08-25 12:00:13][356660712174128][754 ms][DEBUG] END check_internet in 328 ms [2025-08-25 12:00:13][356660712174128][754 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:00:13][356660712174128][754 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356660712174128\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2977\"}'\'' -e'"" [2025-08-25 12:00:13][356660712174128][755 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:00:13][356660712174128][755 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356660712174128\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2977\"}'\'' -e'"" [2025-08-25 12:00:17][356660712174128][4800 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0db6316c-168d-47ef-86b3-33b963f6ed53","id":"QR_0db6316c-168d-47ef-86b3-33b963f6ed53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:00:17][356660712174128][4956 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-25 12:00:17][356660712174128][4956 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-25 12:00:17][356660712174128][4956 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:02:03][354791643189752][1 ms][INFO] === Request start === [2025-08-25 12:02:03][354791643189752][1 ms][DEBUG] START check_scloud [2025-08-25 12:02:03][354791643189752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:02:03][354791643189752][258 ms][DEBUG] SU: done in 256 ms; outu0_a118 28202 22779 24208036 185352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:02:03][354791643189752][258 ms][DEBUG] targetPkg: running [2025-08-25 12:02:03][354791643189752][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-25 12:02:03][354791643189752][258 ms][DEBUG] START check_boot_completed [2025-08-25 12:02:03][354791643189752][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:02:03][354791643189752][302 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 12:02:03][354791643189752][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:02:03][354791643189752][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:02:03][354791643189752][349 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 12:02:03][354791643189752][350 ms][DEBUG] START check_internet [2025-08-25 12:02:03][354791643189752][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:02:04][354791643189752][677 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.256/174.256/174.256/0.000 ms\n [2025-08-25 12:02:04][354791643189752][678 ms][DEBUG] check_internet: online [2025-08-25 12:02:04][354791643189752][678 ms][DEBUG] END check_internet in 328 ms [2025-08-25 12:02:04][354791643189752][678 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:02:04][354791643189752][678 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791643189752\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4019\"}'\'' -e'"" [2025-08-25 12:02:04][354791643189752][678 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:02:04][354791643189752][678 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791643189752\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4019\"}'\'' -e'"" [2025-08-25 12:02:08][354791643189752][4864 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06baf5ce-4c12-4584-9639-cdef753f62e8","id":"QR_06baf5ce-4c12-4584-9639-cdef753f62e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:02:08][354791643189752][5020 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-25 12:02:08][354791643189752][5020 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-25 12:02:08][354791643189752][5020 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:02:11][352053265160914][0 ms][INFO] === Request start === [2025-08-25 12:02:11][352053265160914][1 ms][DEBUG] START check_scloud [2025-08-25 12:02:11][352053265160914][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:02:11][352053265160914][259 ms][DEBUG] SU: done in 259 ms; outu0_a118 28202 22779 24343980 196252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:02:11][352053265160914][260 ms][DEBUG] targetPkg: running [2025-08-25 12:02:11][352053265160914][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 12:02:11][352053265160914][260 ms][DEBUG] START check_boot_completed [2025-08-25 12:02:11][352053265160914][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:02:11][352053265160914][306 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:02:11][352053265160914][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:02:11][352053265160914][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:02:11][352053265160914][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:02:11][352053265160914][353 ms][DEBUG] START check_internet [2025-08-25 12:02:11][352053265160914][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:02:11][352053265160914][588 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.069/141.069/141.069/0.000 ms\n [2025-08-25 12:02:11][352053265160914][588 ms][DEBUG] check_internet: online [2025-08-25 12:02:11][352053265160914][588 ms][DEBUG] END check_internet in 235 ms [2025-08-25 12:02:11][352053265160914][588 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:02:11][352053265160914][588 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053265160914\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6526\"}'\'' -e'"" [2025-08-25 12:02:11][352053265160914][588 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:02:11][352053265160914][588 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053265160914\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6526\"}'\'' -e'"" [2025-08-25 12:02:18][352053265160914][7351 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9f94867-5ae1-4fe9-83a3-e03e74af22b0","id":"QR_f9f94867-5ae1-4fe9-83a3-e03e74af22b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:02:18][352053265160914][7508 ms][DEBUG] proc_open done in 6920 ms; code=255; res.len=3343 [2025-08-25 12:02:18][352053265160914][7508 ms][DEBUG] END runCmdUntilRes#1 in 6920 ms [2025-08-25 12:02:18][352053265160914][7508 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:03:02][351272334094547][0 ms][INFO] === Request start === [2025-08-25 12:03:02][351272334094547][1 ms][DEBUG] START check_scloud [2025-08-25 12:03:02][351272334094547][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:03:02][351272334094547][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 28202 22779 24501772 208696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:03:02][351272334094547][322 ms][DEBUG] targetPkg: running [2025-08-25 12:03:02][351272334094547][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-25 12:03:02][351272334094547][322 ms][DEBUG] START check_boot_completed [2025-08-25 12:03:02][351272334094547][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:03:02][351272334094547][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:03:02][351272334094547][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:03:02][351272334094547][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:03:02][351272334094547][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 12:03:02][351272334094547][415 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:03:02][351272334094547][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272334094547\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5256\"}'\'' -e'"" [2025-08-25 12:03:02][351272334094547][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:03:02][351272334094547][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272334094547\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5256\"}'\'' -e'"" [2025-08-25 12:03:06][351272334094547][4305 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99bc6445-714f-4786-9b1e-42d679cd5775","id":"QR_99bc6445-714f-4786-9b1e-42d679cd5775","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:03:06][351272334094547][4461 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-25 12:03:06][351272334094547][4461 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-25 12:03:06][351272334094547][4461 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:03:07][353439960700162][0 ms][INFO] === Request start === [2025-08-25 12:03:07][353439960700162][1 ms][DEBUG] START check_scloud [2025-08-25 12:03:07][353439960700162][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:03:08][353439960700162][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 28202 22779 24675092 218516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:03:08][353439960700162][312 ms][DEBUG] targetPkg: running [2025-08-25 12:03:08][353439960700162][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 12:03:08][353439960700162][312 ms][DEBUG] START check_boot_completed [2025-08-25 12:03:08][353439960700162][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:03:08][353439960700162][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:03:08][353439960700162][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:03:08][353439960700162][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:03:08][353439960700162][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:03:08][353439960700162][421 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:03:08][353439960700162][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353439960700162\",\"model\":\"SM-X716B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2434\"}'\'' -e'"" [2025-08-25 12:03:08][353439960700162][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:03:08][353439960700162][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353439960700162\",\"model\":\"SM-X716B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2434\"}'\'' -e'"" [2025-08-25 12:03:12][353439960700162][4326 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 12:03:12][353439960700162][4483 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=107 [2025-08-25 12:03:12][353439960700162][4483 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-25 12:03:12][353439960700162][4483 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 12:03:12][][0 ms][INFO] === Request start === [2025-08-25 12:03:12][][1 ms][DEBUG] START check_scloud [2025-08-25 12:03:12][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:03:12][][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 28202 22779 24823836 230408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:03:12][][260 ms][DEBUG] targetPkg: running [2025-08-25 12:03:12][][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 12:03:12][][260 ms][DEBUG] START check_boot_completed [2025-08-25 12:03:12][][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:03:12][][305 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 12:03:12][][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:03:13][][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:03:13][][352 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 12:03:13][][352 ms][DEBUG] rawBody.length=1129 [2025-08-25 12:03:13][][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X716B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W70EQVEN\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9435\"}'\'' -e'"" [2025-08-25 12:03:13][][352 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:03:13][][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X716B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W70EQVEN\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9435\"}'\'' -e'"" [2025-08-25 12:03:16][][3710 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 12:03:16][][3867 ms][DEBUG] proc_open done in 3515 ms; code=255; res.len=107 [2025-08-25 12:03:16][][3867 ms][DEBUG] END runCmdUntilRes#1 in 3515 ms [2025-08-25 12:03:16][][3867 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 12:03:17][355478282455350][0 ms][INFO] === Request start === [2025-08-25 12:03:17][355478282455350][1 ms][DEBUG] START check_scloud [2025-08-25 12:03:17][355478282455350][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:03:17][355478282455350][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 28202 22779 24980772 242008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:03:17][355478282455350][317 ms][DEBUG] targetPkg: running [2025-08-25 12:03:17][355478282455350][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 12:03:17][355478282455350][317 ms][DEBUG] START check_boot_completed [2025-08-25 12:03:17][355478282455350][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:03:17][355478282455350][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:03:17][355478282455350][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:03:17][355478282455350][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:03:17][355478282455350][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:03:17][355478282455350][427 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:03:17][355478282455350][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478282455350\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2535\"}'\'' -e'"" [2025-08-25 12:03:17][355478282455350][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:03:17][355478282455350][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478282455350\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2535\"}'\'' -e'"" [2025-08-25 12:03:21][355478282455350][4129 ms][DEBUG] proc_open done in 3701 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 12:03:21][355478282455350][4129 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-25 12:03:21][355478282455350][4129 ms][WARN] Detected error: Process with pid 28202 either refused to load frida-agent, or terminated during injection [2025-08-25 12:03:21][355478282455350][4129 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 12:03:21][355478282455350][4285 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 12:03:21][355478282455350][4285 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 12:03:21][355478282455350][4285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 12:03:21][355478282455350][4410 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 12:03:21][355478282455350][4410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 12:03:21][355478282455350][4566 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 12:03:23][355478282455350][6581 ms][DEBUG] START check_boot_completed [2025-08-25 12:03:23][355478282455350][6581 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:03:23][355478282455350][6628 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:03:23][355478282455350][6628 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:03:23][355478282455350][6675 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:03:23][355478282455350][6675 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 12:03:26][355478282455350][9690 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 12:03:26][355478282455350][9690 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478282455350\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2535\"}'\'' -e'"" [2025-08-25 12:03:30][355478282455350][13314 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81fa853a-fb51-4257-bc40-c8a8bac8f305","id":"QR_81fa853a-fb51-4257-bc40-c8a8bac8f305","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:03:30][355478282455350][13470 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-25 12:03:30][355478282455350][13470 ms][DEBUG] END runCmdUntilRes#2 in 3780 ms [2025-08-25 12:03:30][355478282455350][13470 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:03:59][351240641322257][0 ms][INFO] === Request start === [2025-08-25 12:03:59][351240641322257][1 ms][DEBUG] START check_scloud [2025-08-25 12:03:59][351240641322257][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:03:59][351240641322257][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 29884 22779 23430964 127204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:03:59][351240641322257][266 ms][DEBUG] targetPkg: running [2025-08-25 12:03:59][351240641322257][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-25 12:03:59][351240641322257][266 ms][DEBUG] START check_boot_completed [2025-08-25 12:03:59][351240641322257][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:03:59][351240641322257][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:03:59][351240641322257][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:03:59][351240641322257][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:03:59][351240641322257][360 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 12:03:59][351240641322257][360 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:03:59][351240641322257][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641322257\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1316\"}'\'' -e'"" [2025-08-25 12:03:59][351240641322257][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:03:59][351240641322257][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641322257\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1316\"}'\'' -e'"" [2025-08-25 12:04:02][351240641322257][3921 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 12:04:03][351240641322257][4077 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=107 [2025-08-25 12:04:03][351240641322257][4077 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-25 12:04:03][351240641322257][4078 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 12:04:03][][0 ms][INFO] === Request start === [2025-08-25 12:04:03][][1 ms][DEBUG] START check_scloud [2025-08-25 12:04:03][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:04:03][][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 29884 22779 23555132 138080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:04:03][][313 ms][DEBUG] targetPkg: running [2025-08-25 12:04:03][][313 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 12:04:03][][314 ms][DEBUG] START check_boot_completed [2025-08-25 12:04:03][][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:04:03][][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:04:03][][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:04:03][][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:04:03][][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:04:03][][423 ms][DEBUG] START check_internet [2025-08-25 12:04:03][][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:04:04][][751 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=123 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 123.169/123.169/123.169/0.000 ms\n [2025-08-25 12:04:04][][751 ms][DEBUG] check_internet: online [2025-08-25 12:04:04][][751 ms][DEBUG] END check_internet in 328 ms [2025-08-25 12:04:04][][751 ms][DEBUG] rawBody.length=1129 [2025-08-25 12:04:04][][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W907BXWF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9881\"}'\'' -e'"" [2025-08-25 12:04:04][][751 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:04:04][][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W907BXWF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9881\"}'\'' -e'"" [2025-08-25 12:04:07][][4187 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 12:04:07][][4343 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=107 [2025-08-25 12:04:07][][4344 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-08-25 12:04:07][][4344 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 12:04:10][351240641322257][1 ms][INFO] === Request start === [2025-08-25 12:04:10][351240641322257][1 ms][DEBUG] START check_scloud [2025-08-25 12:04:10][351240641322257][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:04:10][351240641322257][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 29884 22779 23691588 149956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:04:10][351240641322257][305 ms][DEBUG] targetPkg: running [2025-08-25 12:04:10][351240641322257][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 12:04:10][351240641322257][305 ms][DEBUG] START check_boot_completed [2025-08-25 12:04:10][351240641322257][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:04:10][351240641322257][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:04:10][351240641322257][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:04:10][351240641322257][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:04:10][351240641322257][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:04:10][351240641322257][414 ms][DEBUG] START check_internet [2025-08-25 12:04:10][351240641322257][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:04:10][351240641322257][773 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.354/216.354/216.354/0.000 ms\n [2025-08-25 12:04:10][351240641322257][774 ms][DEBUG] check_internet: online [2025-08-25 12:04:10][351240641322257][774 ms][DEBUG] END check_internet in 360 ms [2025-08-25 12:04:10][351240641322257][774 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:04:10][351240641322257][774 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641322257\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4505\"}'\'' -e'"" [2025-08-25 12:04:10][351240641322257][774 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:04:10][351240641322257][774 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641322257\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4505\"}'\'' -e'"" [2025-08-25 12:04:15][351240641322257][5928 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30a49d90-fb18-4a0a-9ba8-d3bbdd153165","id":"QR_30a49d90-fb18-4a0a-9ba8-d3bbdd153165","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:04:16][351240641322257][6084 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-08-25 12:04:16][351240641322257][6084 ms][DEBUG] END runCmdUntilRes#1 in 5310 ms [2025-08-25 12:04:16][351240641322257][6084 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:04:29][351240641322257][0 ms][INFO] === Request start === [2025-08-25 12:04:29][351240641322257][1 ms][DEBUG] START check_scloud [2025-08-25 12:04:29][351240641322257][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:04:29][351240641322257][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 29884 22779 23829444 160664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:04:29][351240641322257][303 ms][DEBUG] targetPkg: running [2025-08-25 12:04:29][351240641322257][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 12:04:29][351240641322257][304 ms][DEBUG] START check_boot_completed [2025-08-25 12:04:29][351240641322257][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:04:29][351240641322257][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:04:29][351240641322257][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:04:29][351240641322257][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:04:29][351240641322257][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 12:04:29][351240641322257][381 ms][DEBUG] START check_internet [2025-08-25 12:04:29][351240641322257][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:04:29][351240641322257][741 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=246 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 246.671/246.671/246.671/0.000 ms\n [2025-08-25 12:04:29][351240641322257][741 ms][DEBUG] check_internet: online [2025-08-25 12:04:29][351240641322257][741 ms][DEBUG] END check_internet in 360 ms [2025-08-25 12:04:29][351240641322257][741 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:04:29][351240641322257][741 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641322257\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4089\"}'\'' -e'"" [2025-08-25 12:04:29][351240641322257][741 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:04:29][351240641322257][742 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641322257\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4089\"}'\'' -e'"" [2025-08-25 12:04:33][351240641322257][4365 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 12:04:33][351240641322257][4521 ms][DEBUG] proc_open done in 3779 ms; code=255; res.len=107 [2025-08-25 12:04:33][351240641322257][4521 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-25 12:04:33][351240641322257][4521 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 12:04:33][][0 ms][INFO] === Request start === [2025-08-25 12:04:33][][1 ms][DEBUG] START check_scloud [2025-08-25 12:04:33][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:04:34][][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 29884 22779 23982184 172548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:04:34][][294 ms][DEBUG] targetPkg: running [2025-08-25 12:04:34][][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-25 12:04:34][][294 ms][DEBUG] START check_boot_completed [2025-08-25 12:04:34][][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:04:34][][341 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:04:34][][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:04:34][][403 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:04:34][][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:04:34][][403 ms][DEBUG] START check_internet [2025-08-25 12:04:34][][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:04:34][][700 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.932/142.932/142.932/0.000 ms\n [2025-08-25 12:04:34][][700 ms][DEBUG] check_internet: online [2025-08-25 12:04:34][][700 ms][DEBUG] END check_internet in 297 ms [2025-08-25 12:04:34][][700 ms][DEBUG] rawBody.length=1129 [2025-08-25 12:04:34][][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W907BXWF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3381\"}'\'' -e'"" [2025-08-25 12:04:34][][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:04:34][][700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W907BXWF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3381\"}'\'' -e'"" [2025-08-25 12:04:38][][4105 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 12:04:38][][4262 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=107 [2025-08-25 12:04:38][][4262 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-25 12:04:38][][4262 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 12:04:40][351240641322257][0 ms][INFO] === Request start === [2025-08-25 12:04:40][351240641322257][1 ms][DEBUG] START check_scloud [2025-08-25 12:04:40][351240641322257][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:04:40][351240641322257][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 29884 22779 24114352 183080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:04:40][351240641322257][266 ms][DEBUG] targetPkg: running [2025-08-25 12:04:40][351240641322257][266 ms][DEBUG] END check_scloud in 266 ms [2025-08-25 12:04:40][351240641322257][266 ms][DEBUG] START check_boot_completed [2025-08-25 12:04:40][351240641322257][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:04:40][351240641322257][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:04:40][351240641322257][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:04:40][351240641322257][407 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 12:04:40][351240641322257][407 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 12:04:40][351240641322257][407 ms][DEBUG] START check_internet [2025-08-25 12:04:40][351240641322257][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:04:40][351240641322257][766 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.428/225.428/225.428/0.000 ms\n [2025-08-25 12:04:40][351240641322257][766 ms][DEBUG] check_internet: online [2025-08-25 12:04:40][351240641322257][766 ms][DEBUG] END check_internet in 359 ms [2025-08-25 12:04:40][351240641322257][766 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:04:40][351240641322257][766 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641322257\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3883\"}'\'' -e'"" [2025-08-25 12:04:40][351240641322257][766 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:04:40][351240641322257][766 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641322257\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3883\"}'\'' -e'"" [2025-08-25 12:04:45][351240641322257][5109 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_232e0968-d70d-4e27-98b7-b3d2d901e281","id":"QR_232e0968-d70d-4e27-98b7-b3d2d901e281","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:04:45][351240641322257][5265 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-08-25 12:04:45][351240641322257][5265 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-08-25 12:04:45][351240641322257][5265 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:05:02][350513045986344][0 ms][INFO] === Request start === [2025-08-25 12:05:02][350513045986344][1 ms][DEBUG] START check_scloud [2025-08-25 12:05:02][350513045986344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:05:03][350513045986344][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 29884 22779 24213836 195256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:05:03][350513045986344][257 ms][DEBUG] targetPkg: running [2025-08-25 12:05:03][350513045986344][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-25 12:05:03][350513045986344][257 ms][DEBUG] START check_boot_completed [2025-08-25 12:05:03][350513045986344][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:05:03][350513045986344][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:05:03][350513045986344][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:05:03][350513045986344][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:05:03][350513045986344][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:05:03][350513045986344][350 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:05:03][350513045986344][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350513045986344\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9834\"}'\'' -e'"" [2025-08-25 12:05:03][350513045986344][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:05:03][350513045986344][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350513045986344\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9834\"}'\'' -e'"" [2025-08-25 12:05:07][350513045986344][4396 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ffcb536-2655-4171-88e1-bfe95a2a9f71","id":"QR_9ffcb536-2655-4171-88e1-bfe95a2a9f71","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:05:07][350513045986344][4552 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-25 12:05:07][350513045986344][4552 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 12:05:07][350513045986344][4552 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:05:10][352749380670162][0 ms][INFO] === Request start === [2025-08-25 12:05:10][352749380670162][1 ms][DEBUG] START check_scloud [2025-08-25 12:05:10][352749380670162][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:05:10][352749380670162][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 29884 22779 24340052 206248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:05:10][352749380670162][325 ms][DEBUG] targetPkg: running [2025-08-25 12:05:10][352749380670162][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-25 12:05:10][352749380670162][325 ms][DEBUG] START check_boot_completed [2025-08-25 12:05:10][352749380670162][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:05:10][352749380670162][372 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:05:10][352749380670162][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:05:10][352749380670162][434 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:05:10][352749380670162][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:05:10][352749380670162][434 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:05:10][352749380670162][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749380670162\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2349\"}'\'' -e'"" [2025-08-25 12:05:10][352749380670162][434 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:05:10][352749380670162][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749380670162\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2349\"}'\'' -e'"" [2025-08-25 12:05:16][352749380670162][6589 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a86363b-783d-47f0-8179-691cf4e6c2a3","id":"QR_5a86363b-783d-47f0-8179-691cf4e6c2a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:05:17][352749380670162][6745 ms][DEBUG] proc_open done in 6310 ms; code=255; res.len=3343 [2025-08-25 12:05:17][352749380670162][6745 ms][DEBUG] END runCmdUntilRes#1 in 6311 ms [2025-08-25 12:05:17][352749380670162][6745 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:05:21][352665189964665][0 ms][INFO] === Request start === [2025-08-25 12:05:21][352665189964665][1 ms][DEBUG] START check_scloud [2025-08-25 12:05:21][352665189964665][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:05:22][352665189964665][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 29884 22779 24479624 218244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:05:22][352665189964665][308 ms][DEBUG] targetPkg: running [2025-08-25 12:05:22][352665189964665][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 12:05:22][352665189964665][308 ms][DEBUG] START check_boot_completed [2025-08-25 12:05:22][352665189964665][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:05:22][352665189964665][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:05:22][352665189964665][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:05:22][352665189964665][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:05:22][352665189964665][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 12:05:22][352665189964665][386 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:05:22][352665189964665][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189964665\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2719\"}'\'' -e'"" [2025-08-25 12:05:22][352665189964665][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:05:22][352665189964665][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189964665\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2719\"}'\'' -e'"" [2025-08-25 12:05:26][352665189964665][4354 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bafd89ee-9f5b-49bd-8e13-a774f1a13be1","id":"QR_bafd89ee-9f5b-49bd-8e13-a774f1a13be1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:05:26][352665189964665][4510 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-25 12:05:26][352665189964665][4510 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-25 12:05:26][352665189964665][4510 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:05:27][358104902563707][0 ms][INFO] === Request start === [2025-08-25 12:05:27][358104902563707][1 ms][DEBUG] START check_scloud [2025-08-25 12:05:27][358104902563707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:05:28][358104902563707][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 29884 22779 24617964 229436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:05:28][358104902563707][298 ms][DEBUG] targetPkg: running [2025-08-25 12:05:28][358104902563707][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 12:05:28][358104902563707][298 ms][DEBUG] START check_boot_completed [2025-08-25 12:05:28][358104902563707][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:05:28][358104902563707][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:05:28][358104902563707][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:05:28][358104902563707][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:05:28][358104902563707][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:05:28][358104902563707][407 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:05:28][358104902563707][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5045\"}'\'' -e'"" [2025-08-25 12:05:28][358104902563707][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:05:28][358104902563707][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5045\"}'\'' -e'"" [2025-08-25 12:05:31][358104902563707][3734 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 12:05:31][358104902563707][3890 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=115 [2025-08-25 12:05:31][358104902563707][3891 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-08-25 12:05:31][358104902563707][3891 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 12:05:32][][0 ms][INFO] === Request start === [2025-08-25 12:05:32][][1 ms][DEBUG] START check_scloud [2025-08-25 12:05:32][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:05:32][][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 29884 22779 24740020 241188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:05:32][][279 ms][DEBUG] targetPkg: running [2025-08-25 12:05:32][][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-25 12:05:32][][279 ms][DEBUG] START check_boot_completed [2025-08-25 12:05:32][][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:05:32][][326 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:05:32][][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:05:32][][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:05:32][][372 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:05:32][][372 ms][DEBUG] rawBody.length=1129 [2025-08-25 12:05:32][][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10B33XR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8430\"}'\'' -e'"" [2025-08-25 12:05:32][][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:05:32][][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10B33XR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8430\"}'\'' -e'"" [2025-08-25 12:05:36][][4043 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 12:05:36][][4043 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-25 12:05:36][][4043 ms][WARN] Detected error: Process with pid 29884 either refused to load frida-agent, or terminated during injection [2025-08-25 12:05:36][][4043 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 12:05:36][][4184 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 12:05:36][][4184 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 12:05:36][][4184 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 12:05:36][][4340 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 12:05:36][][4340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 12:05:36][][4512 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 12:05:38][][6527 ms][DEBUG] START check_boot_completed [2025-08-25 12:05:38][][6527 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:05:38][][6574 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:05:38][][6574 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:05:38][][6621 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:05:38][][6621 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 12:05:41][][9636 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 12:05:41][][9636 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10B33XR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8430\"}'\'' -e'"" [2025-08-25 12:05:45][][13338 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 12:05:45][][13494 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=107 [2025-08-25 12:05:45][][13494 ms][DEBUG] END runCmdUntilRes#2 in 3859 ms [2025-08-25 12:05:45][][13494 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 12:06:02][351044411612503][0 ms][INFO] === Request start === [2025-08-25 12:06:02][351044411612503][1 ms][DEBUG] START check_scloud [2025-08-25 12:06:02][351044411612503][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:06:03][351044411612503][229 ms][DEBUG] SU: done in 228 ms; outu0_a118 31192 22779 23524832 126420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:06:03][351044411612503][229 ms][DEBUG] targetPkg: running [2025-08-25 12:06:03][351044411612503][229 ms][DEBUG] END check_scloud in 228 ms [2025-08-25 12:06:03][351044411612503][229 ms][DEBUG] START check_boot_completed [2025-08-25 12:06:03][351044411612503][229 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:06:03][351044411612503][260 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:06:03][351044411612503][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:06:03][351044411612503][308 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 12:06:03][351044411612503][308 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 12:06:03][351044411612503][308 ms][DEBUG] START check_internet [2025-08-25 12:06:03][351044411612503][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:06:03][351044411612503][604 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.960/182.960/182.960/0.000 ms\n [2025-08-25 12:06:03][351044411612503][604 ms][DEBUG] check_internet: online [2025-08-25 12:06:03][351044411612503][604 ms][DEBUG] END check_internet in 296 ms [2025-08-25 12:06:03][351044411612503][604 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:06:03][351044411612503][604 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044411612503\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3321\"}'\'' -e'"" [2025-08-25 12:06:03][351044411612503][604 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:06:03][351044411612503][605 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044411612503\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3321\"}'\'' -e'"" [2025-08-25 12:06:07][351044411612503][4634 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4128b161-805a-4bd6-b077-6ff5a32567cd","id":"QR_4128b161-805a-4bd6-b077-6ff5a32567cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:06:07][351044411612503][4790 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 12:06:07][351044411612503][4790 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 12:06:07][351044411612503][4791 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:06:08][350287313872979][0 ms][INFO] === Request start === [2025-08-25 12:06:08][350287313872979][1 ms][DEBUG] START check_scloud [2025-08-25 12:06:08][350287313872979][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:06:09][350287313872979][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 31192 22779 23584116 137620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:06:09][350287313872979][313 ms][DEBUG] targetPkg: running [2025-08-25 12:06:09][350287313872979][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 12:06:09][350287313872979][313 ms][DEBUG] START check_boot_completed [2025-08-25 12:06:09][350287313872979][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:06:09][350287313872979][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:06:09][350287313872979][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:06:09][350287313872979][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:06:09][350287313872979][392 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 12:06:09][350287313872979][392 ms][DEBUG] START check_internet [2025-08-25 12:06:09][350287313872979][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:06:09][350287313872979][797 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.308/255.308/255.308/0.000 ms\n [2025-08-25 12:06:09][350287313872979][798 ms][DEBUG] check_internet: online [2025-08-25 12:06:09][350287313872979][798 ms][DEBUG] END check_internet in 406 ms [2025-08-25 12:06:09][350287313872979][798 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:06:09][350287313872979][798 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287313872979\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6608\"}'\'' -e'"" [2025-08-25 12:06:09][350287313872979][798 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:06:09][350287313872979][798 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287313872979\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6608\"}'\'' -e'"" [2025-08-25 12:06:13][350287313872979][4437 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92b7eb24-90cd-4545-bc29-65abeb697f00","id":"QR_92b7eb24-90cd-4545-bc29-65abeb697f00","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:06:13][350287313872979][4593 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-08-25 12:06:13][350287313872979][4593 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-08-25 12:06:13][350287313872979][4593 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:06:14][351684400268393][1 ms][INFO] === Request start === [2025-08-25 12:06:14][351684400268393][1 ms][DEBUG] START check_scloud [2025-08-25 12:06:14][351684400268393][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:06:15][351684400268393][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 31192 22779 23729908 149452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:06:15][351684400268393][307 ms][DEBUG] targetPkg: running [2025-08-25 12:06:15][351684400268393][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 12:06:15][351684400268393][307 ms][DEBUG] START check_boot_completed [2025-08-25 12:06:15][351684400268393][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:06:15][351684400268393][336 ms][DEBUG] ADB: done in 29 ms; out [2025-08-25 12:06:15][351684400268393][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:06:15][351684400268393][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:06:15][351684400268393][383 ms][DEBUG] END check_boot_completed in 76 ms [2025-08-25 12:06:15][351684400268393][383 ms][DEBUG] START check_internet [2025-08-25 12:06:15][351684400268393][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:06:15][351684400268393][648 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=152 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 152.485/152.485/152.485/0.000 ms\n [2025-08-25 12:06:15][351684400268393][649 ms][DEBUG] check_internet: online [2025-08-25 12:06:15][351684400268393][649 ms][DEBUG] END check_internet in 266 ms [2025-08-25 12:06:15][351684400268393][649 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:06:15][351684400268393][649 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684400268393\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1547\"}'\'' -e'"" [2025-08-25 12:06:15][351684400268393][649 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:06:15][351684400268393][649 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684400268393\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1547\"}'\'' -e'"" [2025-08-25 12:06:19][351684400268393][4366 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f7b6e97-edda-4ca2-97c7-1e81513a6e85","id":"QR_3f7b6e97-edda-4ca2-97c7-1e81513a6e85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:06:19][351684400268393][4522 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-25 12:06:19][351684400268393][4522 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-25 12:06:19][351684400268393][4522 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:06:21][350331801558284][0 ms][INFO] === Request start === [2025-08-25 12:06:21][350331801558284][1 ms][DEBUG] START check_scloud [2025-08-25 12:06:21][350331801558284][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:06:21][350331801558284][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 31192 22779 23900248 160396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:06:21][350331801558284][292 ms][DEBUG] targetPkg: running [2025-08-25 12:06:21][350331801558284][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-25 12:06:21][350331801558284][292 ms][DEBUG] START check_boot_completed [2025-08-25 12:06:21][350331801558284][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:06:21][350331801558284][338 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:06:21][350331801558284][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:06:21][350331801558284][416 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 12:06:21][350331801558284][416 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-25 12:06:21][350331801558284][416 ms][DEBUG] START check_internet [2025-08-25 12:06:21][350331801558284][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:06:22][350331801558284][729 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.997/198.997/198.997/0.000 ms\n [2025-08-25 12:06:22][350331801558284][729 ms][DEBUG] check_internet: online [2025-08-25 12:06:22][350331801558284][729 ms][DEBUG] END check_internet in 313 ms [2025-08-25 12:06:22][350331801558284][729 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:06:22][350331801558284][729 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331801558284\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3991\"}'\'' -e'"" [2025-08-25 12:06:22][350331801558284][729 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:06:22][350331801558284][729 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350331801558284\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3991\"}'\'' -e'"" [2025-08-25 12:06:25][350331801558284][4275 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_542f9d84-fba9-495e-a73a-5be91abb5ebc","id":"QR_542f9d84-fba9-495e-a73a-5be91abb5ebc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:06:25][350331801558284][4431 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-08-25 12:06:25][350331801558284][4431 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-25 12:06:25][350331801558284][4431 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:06:29][352478372426561][0 ms][INFO] === Request start === [2025-08-25 12:06:29][352478372426561][1 ms][DEBUG] START check_scloud [2025-08-25 12:06:29][352478372426561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:06:29][352478372426561][267 ms][DEBUG] SU: done in 267 ms; outu0_a118 31192 22779 24028248 172324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:06:29][352478372426561][267 ms][DEBUG] targetPkg: running [2025-08-25 12:06:29][352478372426561][267 ms][DEBUG] END check_scloud in 267 ms [2025-08-25 12:06:29][352478372426561][268 ms][DEBUG] START check_boot_completed [2025-08-25 12:06:29][352478372426561][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:06:30][352478372426561][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:06:30][352478372426561][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:06:30][352478372426561][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:06:30][352478372426561][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:06:30][352478372426561][361 ms][DEBUG] START check_internet [2025-08-25 12:06:30][352478372426561][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:06:30][352478372426561][674 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.637/218.637/218.637/0.000 ms\n [2025-08-25 12:06:30][352478372426561][674 ms][DEBUG] check_internet: online [2025-08-25 12:06:30][352478372426561][674 ms][DEBUG] END check_internet in 313 ms [2025-08-25 12:06:30][352478372426561][674 ms][DEBUG] rawBody.length=1158 [2025-08-25 12:06:30][352478372426561][674 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352478372426561\",\"model\":\"SM-X510\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52XA011F6P\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8275\"}'\'' -e'"" [2025-08-25 12:06:30][352478372426561][674 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:06:30][352478372426561][674 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352478372426561\",\"model\":\"SM-X510\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52XA011F6P\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8275\"}'\'' -e'"" [2025-08-25 12:06:34][352478372426561][4438 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2060943-9077-4103-9121-62144b56d07d","id":"QR_f2060943-9077-4103-9121-62144b56d07d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:06:34][352478372426561][4594 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-25 12:06:34][352478372426561][4594 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-25 12:06:34][352478372426561][4594 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:07:02][353684142092661][0 ms][INFO] === Request start === [2025-08-25 12:07:02][353684142092661][1 ms][DEBUG] START check_scloud [2025-08-25 12:07:02][353684142092661][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:07:02][353684142092661][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 31192 22779 24111348 183180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:07:02][353684142092661][301 ms][DEBUG] targetPkg: running [2025-08-25 12:07:02][353684142092661][301 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 12:07:02][353684142092661][301 ms][DEBUG] START check_boot_completed [2025-08-25 12:07:02][353684142092661][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:07:02][353684142092661][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:07:02][353684142092661][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:07:02][353684142092661][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:07:02][353684142092661][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 12:07:02][353684142092661][380 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:07:02][353684142092661][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142092661\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6625\"}'\'' -e'"" [2025-08-25 12:07:02][353684142092661][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:07:02][353684142092661][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142092661\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6625\"}'\'' -e'"" [2025-08-25 12:07:06][353684142092661][4535 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0f9a67c-5cd8-46e2-b343-7076516c444c","id":"QR_b0f9a67c-5cd8-46e2-b343-7076516c444c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:07:06][353684142092661][4691 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 12:07:06][353684142092661][4691 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 12:07:06][353684142092661][4691 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:07:08][353089180547446][0 ms][INFO] === Request start === [2025-08-25 12:07:08][353089180547446][1 ms][DEBUG] START check_scloud [2025-08-25 12:07:08][353089180547446][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:07:08][353089180547446][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 31192 22779 24245820 195052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:07:08][353089180547446][300 ms][DEBUG] targetPkg: running [2025-08-25 12:07:08][353089180547446][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 12:07:08][353089180547446][300 ms][DEBUG] START check_boot_completed [2025-08-25 12:07:08][353089180547446][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:07:08][353089180547446][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:07:08][353089180547446][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:07:08][353089180547446][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:07:08][353089180547446][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:07:08][353089180547446][393 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:07:08][353089180547446][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353089180547446\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2036\"}'\'' -e'"" [2025-08-25 12:07:08][353089180547446][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:07:08][353089180547446][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353089180547446\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2036\"}'\'' -e'"" [2025-08-25 12:07:12][353089180547446][4048 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_746695dd-3a36-46fb-ac37-5e6dab41dfe5","id":"QR_746695dd-3a36-46fb-ac37-5e6dab41dfe5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:07:12][353089180547446][4205 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-25 12:07:12][353089180547446][4205 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-25 12:07:12][353089180547446][4205 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:07:15][354106708165987][0 ms][INFO] === Request start === [2025-08-25 12:07:15][354106708165987][1 ms][DEBUG] START check_scloud [2025-08-25 12:07:15][354106708165987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:07:15][354106708165987][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 31192 22779 24423236 205988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:07:15][354106708165987][259 ms][DEBUG] targetPkg: running [2025-08-25 12:07:15][354106708165987][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-25 12:07:15][354106708165987][259 ms][DEBUG] START check_boot_completed [2025-08-25 12:07:15][354106708165987][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:07:15][354106708165987][305 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:07:15][354106708165987][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:07:15][354106708165987][384 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 12:07:15][354106708165987][384 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 12:07:15][354106708165987][384 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:07:15][354106708165987][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106708165987\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7846\"}'\'' -e'"" [2025-08-25 12:07:15][354106708165987][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:07:15][354106708165987][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106708165987\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7846\"}'\'' -e'"" [2025-08-25 12:07:22][354106708165987][6976 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8560a60-c3bb-4235-b0ac-829871d549ef","id":"QR_b8560a60-c3bb-4235-b0ac-829871d549ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:07:22][354106708165987][7132 ms][DEBUG] proc_open done in 6747 ms; code=255; res.len=3343 [2025-08-25 12:07:22][354106708165987][7132 ms][DEBUG] END runCmdUntilRes#1 in 6748 ms [2025-08-25 12:07:22][354106708165987][7132 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:07:26][352665189507175][0 ms][INFO] === Request start === [2025-08-25 12:07:26][352665189507175][1 ms][DEBUG] START check_scloud [2025-08-25 12:07:26][352665189507175][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:07:26][352665189507175][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 31192 22779 24553512 216916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:07:26][352665189507175][317 ms][DEBUG] targetPkg: running [2025-08-25 12:07:26][352665189507175][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 12:07:26][352665189507175][317 ms][DEBUG] START check_boot_completed [2025-08-25 12:07:26][352665189507175][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:07:26][352665189507175][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:07:26][352665189507175][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:07:26][352665189507175][412 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 12:07:26][352665189507175][412 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 12:07:26][352665189507175][412 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:07:26][352665189507175][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189507175\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3290\"}'\'' -e'"" [2025-08-25 12:07:26][352665189507175][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:07:26][352665189507175][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189507175\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3290\"}'\'' -e'"" [2025-08-25 12:07:30][352665189507175][4300 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7dbfd42-6acb-498c-b968-b9a30ace191d","id":"QR_c7dbfd42-6acb-498c-b968-b9a30ace191d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:07:30][352665189507175][4457 ms][DEBUG] proc_open done in 4044 ms; code=255; res.len=3343 [2025-08-25 12:07:30][352665189507175][4457 ms][DEBUG] END runCmdUntilRes#1 in 4044 ms [2025-08-25 12:07:30][352665189507175][4457 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:07:33][352058601438254][0 ms][INFO] === Request start === [2025-08-25 12:07:33][352058601438254][1 ms][DEBUG] START check_scloud [2025-08-25 12:07:33][352058601438254][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:07:34][352058601438254][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 31192 22779 24714380 229032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:07:34][352058601438254][315 ms][DEBUG] targetPkg: running [2025-08-25 12:07:34][352058601438254][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 12:07:34][352058601438254][315 ms][DEBUG] START check_boot_completed [2025-08-25 12:07:34][352058601438254][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:07:34][352058601438254][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:07:34][352058601438254][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:07:34][352058601438254][395 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 12:07:34][352058601438254][395 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 12:07:34][352058601438254][395 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:07:34][352058601438254][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352058601438254\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1316\"}'\'' -e'"" [2025-08-25 12:07:34][352058601438254][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:07:34][352058601438254][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352058601438254\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1316\"}'\'' -e'"" [2025-08-25 12:07:41][352058601438254][7517 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11e425bd-e248-41b6-a510-cec929c5b075","id":"QR_11e425bd-e248-41b6-a510-cec929c5b075","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:07:41][352058601438254][7673 ms][DEBUG] proc_open done in 7278 ms; code=255; res.len=3343 [2025-08-25 12:07:41][352058601438254][7673 ms][DEBUG] END runCmdUntilRes#1 in 7278 ms [2025-08-25 12:07:41][352058601438254][7673 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:08:04][353722793069875][0 ms][INFO] === Request start === [2025-08-25 12:08:04][353722793069875][1 ms][DEBUG] START check_scloud [2025-08-25 12:08:04][353722793069875][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:08:04][353722793069875][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 31192 22779 24767708 241232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:08:04][353722793069875][318 ms][DEBUG] targetPkg: running [2025-08-25 12:08:04][353722793069875][318 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 12:08:04][353722793069875][318 ms][DEBUG] START check_boot_completed [2025-08-25 12:08:04][353722793069875][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:08:04][353722793069875][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:08:04][353722793069875][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:08:04][353722793069875][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:08:04][353722793069875][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:08:04][353722793069875][428 ms][DEBUG] START check_internet [2025-08-25 12:08:04][353722793069875][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:08:04][353722793069875][787 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.814/215.814/215.814/0.000 ms\n [2025-08-25 12:08:04][353722793069875][787 ms][DEBUG] check_internet: online [2025-08-25 12:08:04][353722793069875][787 ms][DEBUG] END check_internet in 359 ms [2025-08-25 12:08:04][353722793069875][787 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:08:04][353722793069875][787 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722793069875\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6930\"}'\'' -e'"" [2025-08-25 12:08:04][353722793069875][787 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:08:04][353722793069875][787 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722793069875\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6930\"}'\'' -e'"" [2025-08-25 12:08:08][353722793069875][4426 ms][DEBUG] proc_open done in 3639 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 12:08:08][353722793069875][4427 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-25 12:08:08][353722793069875][4427 ms][WARN] Detected error: Process with pid 31192 either refused to load frida-agent, or terminated during injection [2025-08-25 12:08:08][353722793069875][4427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 12:08:08][353722793069875][4583 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 12:08:08][353722793069875][4583 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 12:08:08][353722793069875][4583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 12:08:08][353722793069875][4754 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 12:08:08][353722793069875][4754 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 12:08:09][353722793069875][4895 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 12:08:11][353722793069875][6910 ms][DEBUG] START check_boot_completed [2025-08-25 12:08:11][353722793069875][6910 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:08:11][353722793069875][6957 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:08:11][353722793069875][6957 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:08:11][353722793069875][7004 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:08:11][353722793069875][7004 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 12:08:14][353722793069875][10019 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 12:08:14][353722793069875][10019 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722793069875\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6930\"}'\'' -e'"" [2025-08-25 12:08:18][353722793069875][14721 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94cfb5af-6310-40ee-b184-dbea61e048d5","id":"QR_94cfb5af-6310-40ee-b184-dbea61e048d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:08:18][353722793069875][14877 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3343 [2025-08-25 12:08:18][353722793069875][14877 ms][DEBUG] END runCmdUntilRes#2 in 4858 ms [2025-08-25 12:08:18][353722793069875][14877 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:08:23][353713131722671][1 ms][INFO] === Request start === [2025-08-25 12:08:23][353713131722671][1 ms][DEBUG] START check_scloud [2025-08-25 12:08:23][353713131722671][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:08:23][353713131722671][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 32468 22779 23478652 124160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:08:23][353713131722671][249 ms][DEBUG] targetPkg: running [2025-08-25 12:08:23][353713131722671][249 ms][DEBUG] END check_scloud in 248 ms [2025-08-25 12:08:23][353713131722671][249 ms][DEBUG] START check_boot_completed [2025-08-25 12:08:23][353713131722671][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:08:23][353713131722671][296 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:08:23][353713131722671][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:08:23][353713131722671][358 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:08:23][353713131722671][358 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:08:23][353713131722671][358 ms][DEBUG] START check_internet [2025-08-25 12:08:23][353713131722671][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:08:24][353713131722671][717 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.210/250.210/250.210/0.000 ms\n [2025-08-25 12:08:24][353713131722671][718 ms][DEBUG] check_internet: online [2025-08-25 12:08:24][353713131722671][718 ms][DEBUG] END check_internet in 359 ms [2025-08-25 12:08:24][353713131722671][718 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:08:24][353713131722671][718 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353713131722671\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1038\"}'\'' -e'"" [2025-08-25 12:08:24][353713131722671][718 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:08:24][353713131722671][718 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353713131722671\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1038\"}'\'' -e'"" [2025-08-25 12:08:28][353713131722671][5029 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c6f264d-7ea2-49be-91f3-8180ac250e45","id":"QR_9c6f264d-7ea2-49be-91f3-8180ac250e45","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:08:28][353713131722671][5185 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-25 12:08:28][353713131722671][5185 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-25 12:08:28][353713131722671][5185 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:08:30][350100284635020][0 ms][INFO] === Request start === [2025-08-25 12:08:30][350100284635020][1 ms][DEBUG] START check_scloud [2025-08-25 12:08:30][350100284635020][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:08:30][350100284635020][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 32468 22779 23681748 137704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:08:30][350100284635020][266 ms][DEBUG] targetPkg: running [2025-08-25 12:08:30][350100284635020][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-25 12:08:30][350100284635020][266 ms][DEBUG] START check_boot_completed [2025-08-25 12:08:30][350100284635020][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:08:30][350100284635020][313 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:08:30][350100284635020][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:08:30][350100284635020][375 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:08:30][350100284635020][375 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:08:30][350100284635020][375 ms][DEBUG] START check_internet [2025-08-25 12:08:30][350100284635020][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:08:31][350100284635020][672 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.114/193.114/193.114/0.000 ms\n [2025-08-25 12:08:31][350100284635020][672 ms][DEBUG] check_internet: online [2025-08-25 12:08:31][350100284635020][672 ms][DEBUG] END check_internet in 297 ms [2025-08-25 12:08:31][350100284635020][672 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:08:31][350100284635020][672 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100284635020\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9256\"}'\'' -e'"" [2025-08-25 12:08:31][350100284635020][673 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:08:31][350100284635020][673 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100284635020\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9256\"}'\'' -e'"" [2025-08-25 12:08:34][350100284635020][4389 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e1cca93-1f54-4b2f-8617-a286949ea2c5","id":"QR_6e1cca93-1f54-4b2f-8617-a286949ea2c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:08:34][350100284635020][4546 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-25 12:08:34][350100284635020][4546 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-08-25 12:08:34][350100284635020][4546 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:09:02][350100282463813][0 ms][INFO] === Request start === [2025-08-25 12:09:02][350100282463813][1 ms][DEBUG] START check_scloud [2025-08-25 12:09:02][350100282463813][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:09:02][350100282463813][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 32468 22779 23731904 150160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:09:02][350100282463813][307 ms][DEBUG] targetPkg: running [2025-08-25 12:09:02][350100282463813][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 12:09:02][350100282463813][307 ms][DEBUG] START check_boot_completed [2025-08-25 12:09:02][350100282463813][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:09:02][350100282463813][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:09:02][350100282463813][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:09:02][350100282463813][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:09:02][350100282463813][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:09:02][350100282463813][400 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:09:02][350100282463813][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100282463813\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8471\"}'\'' -e'"" [2025-08-25 12:09:02][350100282463813][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:09:02][350100282463813][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100282463813\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8471\"}'\'' -e'"" [2025-08-25 12:09:06][350100282463813][4071 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b58cb34-847b-4cb8-b456-d258607e3f3d","id":"QR_2b58cb34-847b-4cb8-b456-d258607e3f3d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:09:06][350100282463813][4228 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-25 12:09:06][350100282463813][4228 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-25 12:09:06][350100282463813][4228 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:09:09][356544392595986][0 ms][INFO] === Request start === [2025-08-25 12:09:09][356544392595986][1 ms][DEBUG] START check_scloud [2025-08-25 12:09:09][356544392595986][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:09:09][356544392595986][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 32468 22779 23860040 160624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:09:09][356544392595986][311 ms][DEBUG] targetPkg: running [2025-08-25 12:09:09][356544392595986][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 12:09:09][356544392595986][311 ms][DEBUG] START check_boot_completed [2025-08-25 12:09:09][356544392595986][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:09:09][356544392595986][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:09:09][356544392595986][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:09:09][356544392595986][405 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 12:09:09][356544392595986][406 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 12:09:09][356544392595986][406 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:09:09][356544392595986][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544392595986\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4178\"}'\'' -e'"" [2025-08-25 12:09:09][356544392595986][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:09:09][356544392595986][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544392595986\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4178\"}'\'' -e'"" [2025-08-25 12:09:14][356544392595986][5262 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 12:09:14][356544392595986][5419 ms][DEBUG] proc_open done in 5012 ms; code=255; res.len=107 [2025-08-25 12:09:14][356544392595986][5419 ms][DEBUG] END runCmdUntilRes#1 in 5013 ms [2025-08-25 12:09:14][356544392595986][5419 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 12:09:15][][0 ms][INFO] === Request start === [2025-08-25 12:09:15][][1 ms][DEBUG] START check_scloud [2025-08-25 12:09:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:09:15][][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 32468 22779 23992400 172476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:09:15][][306 ms][DEBUG] targetPkg: running [2025-08-25 12:09:15][][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 12:09:15][][306 ms][DEBUG] START check_boot_completed [2025-08-25 12:09:15][][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:09:15][][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:09:15][][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:09:15][][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:09:15][][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:09:15][][415 ms][DEBUG] rawBody.length=1130 [2025-08-25 12:09:15][][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX100LNTN\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1317\"}'\'' -e'"" [2025-08-25 12:09:15][][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:09:15][][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX100LNTN\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1317\"}'\'' -e'"" [2025-08-25 12:09:19][][4836 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 12:09:20][][4992 ms][DEBUG] proc_open done in 4577 ms; code=255; res.len=107 [2025-08-25 12:09:20][][4992 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-25 12:09:20][][4992 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 12:09:21][352854661447338][0 ms][INFO] === Request start === [2025-08-25 12:09:21][352854661447338][1 ms][DEBUG] START check_scloud [2025-08-25 12:09:21][352854661447338][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:09:21][352854661447338][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 32468 22779 24147288 183460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:09:21][352854661447338][306 ms][DEBUG] targetPkg: running [2025-08-25 12:09:21][352854661447338][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 12:09:21][352854661447338][306 ms][DEBUG] START check_boot_completed [2025-08-25 12:09:21][352854661447338][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:09:21][352854661447338][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:09:21][352854661447338][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:09:22][352854661447338][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:09:22][352854661447338][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:09:22][352854661447338][399 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:09:22][352854661447338][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352854661447338\",\"model\":\"SM-S901N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2360\"}'\'' -e'"" [2025-08-25 12:09:22][352854661447338][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:09:22][352854661447338][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352854661447338\",\"model\":\"SM-S901N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2360\"}'\'' -e'"" [2025-08-25 12:09:25][352854661447338][4195 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a411b8a-7f0e-4d0e-a55d-702e8f8c2d85","id":"QR_0a411b8a-7f0e-4d0e-a55d-702e8f8c2d85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:09:25][352854661447338][4351 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-25 12:09:25][352854661447338][4351 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-25 12:09:25][352854661447338][4351 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:09:28][350117734236241][0 ms][INFO] === Request start === [2025-08-25 12:09:28][350117734236241][1 ms][DEBUG] START check_scloud [2025-08-25 12:09:28][350117734236241][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:09:28][350117734236241][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 32468 22779 24272408 195340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:09:28][350117734236241][294 ms][DEBUG] targetPkg: running [2025-08-25 12:09:28][350117734236241][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-25 12:09:28][350117734236241][295 ms][DEBUG] START check_boot_completed [2025-08-25 12:09:28][350117734236241][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:09:28][350117734236241][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:09:28][350117734236241][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:09:28][350117734236241][404 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 12:09:28][350117734236241][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:09:28][350117734236241][404 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:09:28][350117734236241][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350117734236241\",\"model\":\"SM-F966B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7528\"}'\'' -e'"" [2025-08-25 12:09:28][350117734236241][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:09:28][350117734236241][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350117734236241\",\"model\":\"SM-F966B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7528\"}'\'' -e'"" [2025-08-25 12:09:33][350117734236241][4559 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b07c3752-258a-4874-ad34-2ce27920dd0d","id":"QR_b07c3752-258a-4874-ad34-2ce27920dd0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:09:33][350117734236241][4715 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 12:09:33][350117734236241][4715 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 12:09:33][350117734236241][4715 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:10:03][358243511095758][0 ms][INFO] === Request start === [2025-08-25 12:10:03][358243511095758][1 ms][DEBUG] START check_scloud [2025-08-25 12:10:03][358243511095758][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:10:04][358243511095758][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 32468 22779 24375824 206836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:10:04][358243511095758][317 ms][DEBUG] targetPkg: running [2025-08-25 12:10:04][358243511095758][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 12:10:04][358243511095758][317 ms][DEBUG] START check_boot_completed [2025-08-25 12:10:04][358243511095758][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:10:04][358243511095758][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:10:04][358243511095758][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:10:04][358243511095758][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:10:04][358243511095758][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:10:04][358243511095758][411 ms][DEBUG] START check_internet [2025-08-25 12:10:04][358243511095758][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:10:04][358243511095758][833 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.673/201.673/201.673/0.000 ms\n [2025-08-25 12:10:04][358243511095758][833 ms][DEBUG] check_internet: online [2025-08-25 12:10:04][358243511095758][833 ms][DEBUG] END check_internet in 422 ms [2025-08-25 12:10:04][358243511095758][833 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:10:04][358243511095758][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358243511095758\",\"model\":\"SM-M336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2490\"}'\'' -e'"" [2025-08-25 12:10:04][358243511095758][833 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:10:04][358243511095758][833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358243511095758\",\"model\":\"SM-M336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2490\"}'\'' -e'"" [2025-08-25 12:10:08][358243511095758][4644 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bb38f6b-17a0-4d97-9c34-18b63692b3de","id":"QR_1bb38f6b-17a0-4d97-9c34-18b63692b3de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:10:08][358243511095758][4800 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-25 12:10:08][358243511095758][4800 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-25 12:10:08][358243511095758][4801 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:11:03][351240643766998][1 ms][INFO] === Request start === [2025-08-25 12:11:03][351240643766998][1 ms][DEBUG] START check_scloud [2025-08-25 12:11:03][351240643766998][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:11:03][351240643766998][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 32468 22779 24504936 217652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:11:03][351240643766998][298 ms][DEBUG] targetPkg: running [2025-08-25 12:11:03][351240643766998][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 12:11:03][351240643766998][298 ms][DEBUG] START check_boot_completed [2025-08-25 12:11:03][351240643766998][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:11:03][351240643766998][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:11:03][351240643766998][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:11:03][351240643766998][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:11:03][351240643766998][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:11:03][351240643766998][392 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:11:03][351240643766998][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643766998\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6222\"}'\'' -e'"" [2025-08-25 12:11:03][351240643766998][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:11:03][351240643766998][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643766998\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6222\"}'\'' -e'"" [2025-08-25 12:11:07][351240643766998][4625 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee1e0879-31f8-4b99-aa75-7c311da8fb70","id":"QR_ee1e0879-31f8-4b99-aa75-7c311da8fb70","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:11:08][351240643766998][4781 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-25 12:11:08][351240643766998][4781 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-25 12:11:08][351240643766998][4781 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:11:11][351617731039992][0 ms][INFO] === Request start === [2025-08-25 12:11:11][351617731039992][1 ms][DEBUG] START check_scloud [2025-08-25 12:11:11][351617731039992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:11:12][351617731039992][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 32468 22779 24645488 229720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:11:12][351617731039992][287 ms][DEBUG] targetPkg: running [2025-08-25 12:11:12][351617731039992][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-25 12:11:12][351617731039992][287 ms][DEBUG] START check_boot_completed [2025-08-25 12:11:12][351617731039992][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:11:12][351617731039992][334 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:11:12][351617731039992][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:11:12][351617731039992][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:11:12][351617731039992][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 12:11:12][351617731039992][381 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:11:12][351617731039992][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351617731039992\",\"model\":\"SM-A546W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9459\"}'\'' -e'"" [2025-08-25 12:11:12][351617731039992][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:11:12][351617731039992][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351617731039992\",\"model\":\"SM-A546W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9459\"}'\'' -e'"" [2025-08-25 12:11:17][351617731039992][5489 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a021807-54c4-4388-a0e7-521ade50389d","id":"QR_3a021807-54c4-4388-a0e7-521ade50389d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:11:17][351617731039992][5645 ms][DEBUG] proc_open done in 5263 ms; code=255; res.len=3343 [2025-08-25 12:11:17][351617731039992][5645 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-08-25 12:11:17][351617731039992][5645 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:12:04][352009447771291][0 ms][INFO] === Request start === [2025-08-25 12:12:04][352009447771291][1 ms][DEBUG] START check_scloud [2025-08-25 12:12:04][352009447771291][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:12:04][352009447771291][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 32468 22779 24738864 241832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:12:04][352009447771291][278 ms][DEBUG] targetPkg: running [2025-08-25 12:12:04][352009447771291][278 ms][DEBUG] END check_scloud in 278 ms [2025-08-25 12:12:04][352009447771291][278 ms][DEBUG] START check_boot_completed [2025-08-25 12:12:04][352009447771291][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:12:04][352009447771291][325 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:12:04][352009447771291][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:12:04][352009447771291][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:12:04][352009447771291][372 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:12:04][352009447771291][372 ms][DEBUG] START check_internet [2025-08-25 12:12:04][352009447771291][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:12:04][352009447771291][700 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.027/221.027/221.027/0.000 ms\n [2025-08-25 12:12:04][352009447771291][700 ms][DEBUG] check_internet: online [2025-08-25 12:12:04][352009447771291][700 ms][DEBUG] END check_internet in 328 ms [2025-08-25 12:12:04][352009447771291][700 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:12:04][352009447771291][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009447771291\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9785\"}'\'' -e'"" [2025-08-25 12:12:04][352009447771291][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:12:04][352009447771291][700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009447771291\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9785\"}'\'' -e'"" [2025-08-25 12:12:08][352009447771291][4371 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 12:12:08][352009447771291][4371 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-25 12:12:08][352009447771291][4371 ms][WARN] Detected error: Process with pid 32468 either refused to load frida-agent, or terminated during injection [2025-08-25 12:12:08][352009447771291][4371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 12:12:08][352009447771291][4527 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 12:12:08][352009447771291][4527 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 12:12:08][352009447771291][4527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 12:12:08][352009447771291][4668 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 12:12:08][352009447771291][4668 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 12:12:08][352009447771291][4824 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 12:12:10][352009447771291][6839 ms][DEBUG] START check_boot_completed [2025-08-25 12:12:10][352009447771291][6839 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:12:10][352009447771291][6886 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:12:10][352009447771291][6886 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:12:10][352009447771291][6934 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 12:12:10][352009447771291][6934 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 12:12:13][352009447771291][9948 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 12:12:13][352009447771291][9948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009447771291\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9785\"}'\'' -e'"" [2025-08-25 12:12:17][352009447771291][13978 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d889bbf-ab08-4dee-85b7-65ea62642ed8","id":"QR_0d889bbf-ab08-4dee-85b7-65ea62642ed8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:12:18][352009447771291][14134 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 12:12:18][352009447771291][14134 ms][DEBUG] END runCmdUntilRes#2 in 4187 ms [2025-08-25 12:12:18][352009447771291][14134 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:13:03][354255812351619][0 ms][INFO] === Request start === [2025-08-25 12:13:03][354255812351619][1 ms][DEBUG] START check_scloud [2025-08-25 12:13:03][354255812351619][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:13:03][354255812351619][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 1192 22779 23423252 128164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:13:03][354255812351619][310 ms][DEBUG] targetPkg: running [2025-08-25 12:13:03][354255812351619][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 12:13:03][354255812351619][310 ms][DEBUG] START check_boot_completed [2025-08-25 12:13:03][354255812351619][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:13:03][354255812351619][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:13:03][354255812351619][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:13:03][354255812351619][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:13:03][354255812351619][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:13:03][354255812351619][404 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:13:03][354255812351619][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255812351619\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2823\"}'\'' -e'"" [2025-08-25 12:13:03][354255812351619][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:13:03][354255812351619][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255812351619\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2823\"}'\'' -e'"" [2025-08-25 12:13:07][354255812351619][4215 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d36a068-8717-42a0-9019-d87f5c545414","id":"QR_0d36a068-8717-42a0-9019-d87f5c545414","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:13:07][354255812351619][4371 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-08-25 12:13:07][354255812351619][4371 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-08-25 12:13:07][354255812351619][4371 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:14:02][355928812024134][1 ms][INFO] === Request start === [2025-08-25 12:14:02][355928812024134][1 ms][DEBUG] START check_scloud [2025-08-25 12:14:02][355928812024134][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:14:02][355928812024134][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 1192 22779 23530872 138164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:14:02][355928812024134][253 ms][DEBUG] targetPkg: running [2025-08-25 12:14:02][355928812024134][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-25 12:14:02][355928812024134][253 ms][DEBUG] START check_boot_completed [2025-08-25 12:14:02][355928812024134][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:14:02][355928812024134][300 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:14:02][355928812024134][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:14:02][355928812024134][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:14:02][355928812024134][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:14:02][355928812024134][347 ms][DEBUG] START check_internet [2025-08-25 12:14:02][355928812024134][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:14:03][355928812024134][816 ms][DEBUG] SU: done in 470 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.920/202.920/202.920/0.000 ms\n [2025-08-25 12:14:03][355928812024134][816 ms][DEBUG] check_internet: online [2025-08-25 12:14:03][355928812024134][816 ms][DEBUG] END check_internet in 470 ms [2025-08-25 12:14:03][355928812024134][816 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:14:03][355928812024134][816 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928812024134\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7048\"}'\'' -e'"" [2025-08-25 12:14:03][355928812024134][817 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:14:03][355928812024134][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928812024134\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7048\"}'\'' -e'"" [2025-08-25 12:14:07][355928812024134][5111 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b22a2e39-9846-4581-bf3a-a565b85760eb","id":"QR_b22a2e39-9846-4581-bf3a-a565b85760eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:14:07][355928812024134][5267 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-08-25 12:14:07][355928812024134][5267 ms][DEBUG] END runCmdUntilRes#1 in 4451 ms [2025-08-25 12:14:07][355928812024134][5267 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:15:02][357298585577835][0 ms][INFO] === Request start === [2025-08-25 12:15:02][357298585577835][1 ms][DEBUG] START check_scloud [2025-08-25 12:15:02][357298585577835][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:15:03][357298585577835][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 1192 22779 23676240 149984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:15:03][357298585577835][297 ms][DEBUG] targetPkg: running [2025-08-25 12:15:03][357298585577835][297 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 12:15:03][357298585577835][297 ms][DEBUG] START check_boot_completed [2025-08-25 12:15:03][357298585577835][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:15:03][357298585577835][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:15:03][357298585577835][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:15:03][357298585577835][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:15:03][357298585577835][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:15:03][357298585577835][406 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:15:03][357298585577835][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357298585577835\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5019\"}'\'' -e'"" [2025-08-25 12:15:03][357298585577835][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:15:03][357298585577835][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357298585577835\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5019\"}'\'' -e'"" [2025-08-25 12:15:07][357298585577835][4421 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ec61961-3846-4c8c-8ae5-ed325efe2dfa","id":"QR_7ec61961-3846-4c8c-8ae5-ed325efe2dfa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:15:07][357298585577835][4577 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-25 12:15:07][357298585577835][4577 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-25 12:15:07][357298585577835][4577 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:16:03][353204335681814][1 ms][INFO] === Request start === [2025-08-25 12:16:03][353204335681814][1 ms][DEBUG] START check_scloud [2025-08-25 12:16:03][353204335681814][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:16:03][353204335681814][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 1192 22779 23838160 161100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:16:03][353204335681814][256 ms][DEBUG] targetPkg: running [2025-08-25 12:16:03][353204335681814][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-25 12:16:03][353204335681814][256 ms][DEBUG] START check_boot_completed [2025-08-25 12:16:03][353204335681814][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:16:03][353204335681814][303 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:16:03][353204335681814][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:16:04][353204335681814][396 ms][DEBUG] SU: done in 93 ms; out [2025-08-25 12:16:04][353204335681814][397 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 12:16:04][353204335681814][397 ms][DEBUG] START check_internet [2025-08-25 12:16:04][353204335681814][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:16:04][353204335681814][818 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=304 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 304.099/304.099/304.099/0.000 ms\n [2025-08-25 12:16:04][353204335681814][819 ms][DEBUG] check_internet: online [2025-08-25 12:16:04][353204335681814][819 ms][DEBUG] END check_internet in 422 ms [2025-08-25 12:16:04][353204335681814][819 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:16:04][353204335681814][819 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204335681814\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8647\"}'\'' -e'"" [2025-08-25 12:16:04][353204335681814][819 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:16:04][353204335681814][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204335681814\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8647\"}'\'' -e'"" [2025-08-25 12:16:08][353204335681814][4833 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1450d3a4-23a9-49de-aec2-e83054fe3bf1","id":"QR_1450d3a4-23a9-49de-aec2-e83054fe3bf1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:16:08][353204335681814][4989 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-25 12:16:08][353204335681814][4989 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-25 12:16:08][353204335681814][4990 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:18:03][353243881142839][0 ms][INFO] === Request start === [2025-08-25 12:18:03][353243881142839][1 ms][DEBUG] START check_scloud [2025-08-25 12:18:03][353243881142839][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:18:03][353243881142839][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 1192 22779 23999156 171920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:18:03][353243881142839][258 ms][DEBUG] targetPkg: running [2025-08-25 12:18:03][353243881142839][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-25 12:18:03][353243881142839][258 ms][DEBUG] START check_boot_completed [2025-08-25 12:18:03][353243881142839][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:18:04][353243881142839][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:18:04][353243881142839][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:18:04][353243881142839][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:18:04][353243881142839][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 12:18:04][353243881142839][336 ms][DEBUG] START check_internet [2025-08-25 12:18:04][353243881142839][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:18:04][353243881142839][711 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=274 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 274.021/274.021/274.021/0.000 ms\n [2025-08-25 12:18:04][353243881142839][711 ms][DEBUG] check_internet: online [2025-08-25 12:18:04][353243881142839][711 ms][DEBUG] END check_internet in 375 ms [2025-08-25 12:18:04][353243881142839][711 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:18:04][353243881142839][711 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243881142839\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8861\"}'\'' -e'"" [2025-08-25 12:18:04][353243881142839][711 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:18:04][353243881142839][711 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243881142839\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8861\"}'\'' -e'"" [2025-08-25 12:18:08][353243881142839][4835 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a3465ce-956b-498a-834c-e11c94a12fb3","id":"QR_5a3465ce-956b-498a-834c-e11c94a12fb3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:18:08][353243881142839][4991 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-25 12:18:08][353243881142839][4991 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-25 12:18:08][353243881142839][4991 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:19:03][353341128265437][1 ms][INFO] === Request start === [2025-08-25 12:19:03][353341128265437][1 ms][DEBUG] START check_scloud [2025-08-25 12:19:03][353341128265437][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:19:03][353341128265437][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 1192 22779 24131544 183932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:19:03][353341128265437][313 ms][DEBUG] targetPkg: running [2025-08-25 12:19:03][353341128265437][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 12:19:03][353341128265437][313 ms][DEBUG] START check_boot_completed [2025-08-25 12:19:03][353341128265437][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:19:03][353341128265437][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:19:03][353341128265437][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:19:03][353341128265437][422 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 12:19:03][353341128265437][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:19:03][353341128265437][422 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:19:03][353341128265437][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353341128265437\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7305\"}'\'' -e'"" [2025-08-25 12:19:03][353341128265437][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:19:03][353341128265437][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353341128265437\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7305\"}'\'' -e'"" [2025-08-25 12:19:08][353341128265437][4811 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4476d3ee-8ac8-4164-ac91-919aef37dd36","id":"QR_4476d3ee-8ac8-4164-ac91-919aef37dd36","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:19:08][353341128265437][4968 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-08-25 12:19:08][353341128265437][4968 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-08-25 12:19:08][353341128265437][4968 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:19:11][352502216509611][0 ms][INFO] === Request start === [2025-08-25 12:19:11][352502216509611][1 ms][DEBUG] START check_scloud [2025-08-25 12:19:11][352502216509611][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:19:11][352502216509611][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 1192 22779 24274016 194988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:19:11][352502216509611][304 ms][DEBUG] targetPkg: running [2025-08-25 12:19:11][352502216509611][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 12:19:11][352502216509611][304 ms][DEBUG] START check_boot_completed [2025-08-25 12:19:11][352502216509611][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:19:11][352502216509611][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:19:11][352502216509611][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:19:11][352502216509611][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:19:11][352502216509611][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:19:11][352502216509611][413 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:19:11][352502216509611][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502216509611\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6593\"}'\'' -e'"" [2025-08-25 12:19:11][352502216509611][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:19:11][352502216509611][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502216509611\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6593\"}'\'' -e'"" [2025-08-25 12:19:15][352502216509611][4568 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbd5f31c-0462-4da2-807e-8fd031b37ef3","id":"QR_cbd5f31c-0462-4da2-807e-8fd031b37ef3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:19:15][352502216509611][4724 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 12:19:15][352502216509611][4724 ms][DEBUG] END runCmdUntilRes#1 in 4312 ms [2025-08-25 12:19:15][352502216509611][4725 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:20:05][350948905765380][0 ms][INFO] === Request start === [2025-08-25 12:20:05][350948905765380][1 ms][DEBUG] START check_scloud [2025-08-25 12:20:05][350948905765380][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:20:05][350948905765380][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 1192 22779 24400032 207116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:20:05][350948905765380][281 ms][DEBUG] targetPkg: running [2025-08-25 12:20:05][350948905765380][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-25 12:20:05][350948905765380][281 ms][DEBUG] START check_boot_completed [2025-08-25 12:20:05][350948905765380][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:20:05][350948905765380][328 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:20:05][350948905765380][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:20:05][350948905765380][390 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:20:05][350948905765380][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:20:05][350948905765380][390 ms][DEBUG] START check_internet [2025-08-25 12:20:05][350948905765380][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:20:06][350948905765380][890 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.053/202.053/202.053/0.000 ms\n [2025-08-25 12:20:06][350948905765380][890 ms][DEBUG] check_internet: online [2025-08-25 12:20:06][350948905765380][890 ms][DEBUG] END check_internet in 500 ms [2025-08-25 12:20:06][350948905765380][890 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:20:06][350948905765380][890 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350948905765380\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9187\"}'\'' -e'"" [2025-08-25 12:20:06][350948905765380][890 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:20:06][350948905765380][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350948905765380\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9187\"}'\'' -e'"" [2025-08-25 12:20:11][350948905765380][6248 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_645c3598-16f4-41b3-860a-b45f238668a7","id":"QR_645c3598-16f4-41b3-860a-b45f238668a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:20:11][350948905765380][6404 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-25 12:20:11][350948905765380][6404 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-25 12:20:11][350948905765380][6404 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:24:03][351684403032713][1 ms][INFO] === Request start === [2025-08-25 12:24:03][351684403032713][1 ms][DEBUG] START check_scloud [2025-08-25 12:24:03][351684403032713][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:24:03][351684403032713][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 1192 22779 24509828 217900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:24:03][351684403032713][291 ms][DEBUG] targetPkg: running [2025-08-25 12:24:03][351684403032713][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-25 12:24:03][351684403032713][291 ms][DEBUG] START check_boot_completed [2025-08-25 12:24:03][351684403032713][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:24:03][351684403032713][323 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:24:03][351684403032713][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:24:04][351684403032713][385 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 12:24:04][351684403032713][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 12:24:04][351684403032713][386 ms][DEBUG] START check_internet [2025-08-25 12:24:04][351684403032713][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:24:04][351684403032713][870 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.104/202.104/202.104/0.000 ms\n [2025-08-25 12:24:04][351684403032713][870 ms][DEBUG] check_internet: online [2025-08-25 12:24:04][351684403032713][870 ms][DEBUG] END check_internet in 484 ms [2025-08-25 12:24:04][351684403032713][870 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:24:04][351684403032713][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684403032713\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3970\"}'\'' -e'"" [2025-08-25 12:24:04][351684403032713][870 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:24:04][351684403032713][870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684403032713\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3970\"}'\'' -e'"" [2025-08-25 12:24:08][351684403032713][5165 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b73fdd3-145d-41c4-9048-dadc43e2fe42","id":"QR_1b73fdd3-145d-41c4-9048-dadc43e2fe42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:24:08][351684403032713][5322 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-08-25 12:24:08][351684403032713][5322 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-25 12:24:08][351684403032713][5322 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:26:03][354644700944538][0 ms][INFO] === Request start === [2025-08-25 12:26:03][354644700944538][1 ms][DEBUG] START check_scloud [2025-08-25 12:26:03][354644700944538][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:26:03][354644700944538][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 1192 22779 24678020 229892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:26:03][354644700944538][302 ms][DEBUG] targetPkg: running [2025-08-25 12:26:03][354644700944538][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 12:26:03][354644700944538][302 ms][DEBUG] START check_boot_completed [2025-08-25 12:26:03][354644700944538][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:26:03][354644700944538][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:26:03][354644700944538][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:26:03][354644700944538][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:26:03][354644700944538][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:26:03][354644700944538][395 ms][DEBUG] START check_internet [2025-08-25 12:26:03][354644700944538][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:26:04][354644700944538][723 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.114/221.114/221.114/0.000 ms\n [2025-08-25 12:26:04][354644700944538][724 ms][DEBUG] check_internet: online [2025-08-25 12:26:04][354644700944538][724 ms][DEBUG] END check_internet in 329 ms [2025-08-25 12:26:04][354644700944538][724 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:26:04][354644700944538][724 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354644700944538\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9870\"}'\'' -e'"" [2025-08-25 12:26:04][354644700944538][724 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:26:04][354644700944538][724 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354644700944538\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9870\"}'\'' -e'"" [2025-08-25 12:26:08][354644700944538][4691 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27796f6d-2448-4e21-8238-35f04179e23f","id":"QR_27796f6d-2448-4e21-8238-35f04179e23f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:26:08][354644700944538][4847 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-25 12:26:08][354644700944538][4847 ms][DEBUG] END runCmdUntilRes#1 in 4123 ms [2025-08-25 12:26:08][354644700944538][4847 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:26:10][353204330228330][1 ms][INFO] === Request start === [2025-08-25 12:26:10][353204330228330][1 ms][DEBUG] START check_scloud [2025-08-25 12:26:10][353204330228330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:26:11][353204330228330][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 1192 22779 24837008 240860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:26:11][353204330228330][300 ms][DEBUG] targetPkg: running [2025-08-25 12:26:11][353204330228330][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 12:26:11][353204330228330][300 ms][DEBUG] START check_boot_completed [2025-08-25 12:26:11][353204330228330][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:26:11][353204330228330][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:26:11][353204330228330][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:26:11][353204330228330][409 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 12:26:11][353204330228330][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:26:11][353204330228330][410 ms][DEBUG] START check_internet [2025-08-25 12:26:11][353204330228330][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:26:11][353204330228330][831 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.691/267.691/267.691/0.000 ms\n [2025-08-25 12:26:11][353204330228330][831 ms][DEBUG] check_internet: online [2025-08-25 12:26:11][353204330228330][831 ms][DEBUG] END check_internet in 422 ms [2025-08-25 12:26:11][353204330228330][831 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:26:11][353204330228330][831 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204330228330\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4324\"}'\'' -e'"" [2025-08-25 12:26:11][353204330228330][831 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:26:11][353204330228330][832 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204330228330\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4324\"}'\'' -e'"" [2025-08-25 12:26:19][353204330228330][8533 ms][DEBUG] proc_open done in 7701 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 12:26:19][353204330228330][8533 ms][DEBUG] END runCmdUntilRes#1 in 7701 ms [2025-08-25 12:26:19][353204330228330][8533 ms][WARN] Detected error: Process with pid 1192 either refused to load frida-agent, or terminated during injection [2025-08-25 12:26:19][353204330228330][8533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 12:26:19][353204330228330][8673 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 12:26:19][353204330228330][8673 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 12:26:19][353204330228330][8673 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 12:26:19][353204330228330][9048 ms][DEBUG] SU: done in 375 ms; out [2025-08-25 12:26:19][353204330228330][9048 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 12:26:20][353204330228330][9282 ms][DEBUG] SU: done in 234 ms; out [2025-08-25 12:26:22][353204330228330][11297 ms][DEBUG] START check_boot_completed [2025-08-25 12:26:22][353204330228330][11297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:26:22][353204330228330][11344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:26:22][353204330228330][11344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:26:22][353204330228330][11422 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 12:26:22][353204330228330][11422 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 12:26:25][353204330228330][14437 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 12:26:25][353204330228330][14437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204330228330\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4324\"}'\'' -e'"" [2025-08-25 12:26:26][353204330228330][15921 ms][DEBUG] proc_open done in 1484 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-25 12:26:26][353204330228330][15922 ms][DEBUG] END runCmdUntilRes#2 in 1484 ms [2025-08-25 12:26:26][353204330228330][15922 ms][WARN] Detected error 2; Reboot the device [2025-08-25 12:26:26][353204330228330][15922 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 12:26:27][353204330228330][16546 ms][DEBUG] SU: done in 624 ms; out [2025-08-25 12:27:03][353204330228330][0 ms][INFO] === Request start === [2025-08-25 12:27:03][353204330228330][1 ms][DEBUG] START check_scloud [2025-08-25 12:27:03][353204330228330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:27:03][353204330228330][32 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 12:27:03][353204330228330][32 ms][WARN] targetPkg: not running, restarting [2025-08-25 12:27:03][353204330228330][32 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 12:27:03][353204330228330][63 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 12:27:03][353204330228330][63 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 12:27:03][353204330228330][94 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 12:27:05][353204330228330][2110 ms][DEBUG] END check_scloud in 2109 ms [2025-08-25 12:27:05][353204330228330][2110 ms][DEBUG] START check_boot_completed [2025-08-25 12:27:05][353204330228330][2110 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:27:28][353204330228330][24485 ms][DEBUG] ADB: done in 22376 ms; out [2025-08-25 12:27:28][353204330228330][24485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:27:28][353204330228330][24579 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 12:27:28][353204330228330][24579 ms][DEBUG] END check_boot_completed in 22470 ms [2025-08-25 12:27:28][353204330228330][24579 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:27:28][353204330228330][24580 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204330228330\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5818\"}'\'' -e'"" [2025-08-25 12:27:28][353204330228330][24580 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:27:28][353204330228330][24580 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204330228330\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5818\"}'\'' -e'"" [2025-08-25 12:27:31][353204330228330][27813 ms][DEBUG] proc_open done in 3233 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-25 12:27:31][353204330228330][27813 ms][DEBUG] END runCmdUntilRes#1 in 3233 ms [2025-08-25 12:27:31][353204330228330][27813 ms][WARN] Detected error: Process not found [2025-08-25 12:27:31][353204330228330][27813 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 12:27:31][353204330228330][27969 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 12:27:31][353204330228330][27969 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 12:27:31][353204330228330][27969 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 12:27:31][353204330228330][28094 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 12:27:31][353204330228330][28094 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 12:27:31][353204330228330][28282 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 12:27:33][353204330228330][30296 ms][DEBUG] START check_boot_completed [2025-08-25 12:27:33][353204330228330][30297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:27:34][353204330228330][31343 ms][DEBUG] ADB: done in 1046 ms; out [2025-08-25 12:27:34][353204330228330][31343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:27:35][353204330228330][31405 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:27:35][353204330228330][31405 ms][DEBUG] END check_boot_completed in 1109 ms [2025-08-25 12:27:38][353204330228330][34420 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 12:27:38][353204330228330][34420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204330228330\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5818\"}'\'' -e'"" [2025-08-25 12:28:03][353204330228330][0 ms][INFO] === Request start === [2025-08-25 12:28:03][353204330228330][1 ms][DEBUG] START check_scloud [2025-08-25 12:28:03][353204330228330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:28:04][353204330228330][395 ms][DEBUG] SU: done in 394 ms; out [2025-08-25 12:28:04][353204330228330][395 ms][WARN] targetPkg: not running, restarting [2025-08-25 12:28:04][353204330228330][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 12:28:04][353204330228330][551 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 12:28:04][353204330228330][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 12:28:04][353204330228330][864 ms][DEBUG] SU: done in 312 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 12:28:06][353204330228330][2879 ms][DEBUG] END check_scloud in 2878 ms [2025-08-25 12:28:06][353204330228330][2879 ms][DEBUG] START check_boot_completed [2025-08-25 12:28:06][353204330228330][2879 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:28:06][353204330228330][2926 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:28:06][353204330228330][2926 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:28:06][353204330228330][3004 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 12:28:06][353204330228330][3004 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 12:28:06][353204330228330][3004 ms][DEBUG] START check_internet [2025-08-25 12:28:06][353204330228330][3004 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:28:07][353204330228330][3535 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.011/248.011/248.011/0.000 ms\n [2025-08-25 12:28:07][353204330228330][3535 ms][DEBUG] check_internet: online [2025-08-25 12:28:07][353204330228330][3536 ms][DEBUG] END check_internet in 532 ms [2025-08-25 12:28:07][353204330228330][3536 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:28:07][353204330228330][3536 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204330228330\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9453\"}'\'' -e'"" [2025-08-25 12:28:07][353204330228330][3536 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:28:07][353204330228330][3536 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204330228330\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9453\"}'\'' -e'"" [2025-08-25 12:28:13][353204330228330][9986 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ac74058-655c-4157-a3a4-f40135258a78","id":"QR_8ac74058-655c-4157-a3a4-f40135258a78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:28:14][353204330228330][10143 ms][DEBUG] proc_open done in 6607 ms; code=255; res.len=3343 [2025-08-25 12:28:14][353204330228330][10143 ms][DEBUG] END runCmdUntilRes#1 in 6607 ms [2025-08-25 12:28:14][353204330228330][10143 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:29:02][352554204393847][1 ms][INFO] === Request start === [2025-08-25 12:29:02][352554204393847][1 ms][DEBUG] START check_scloud [2025-08-25 12:29:02][352554204393847][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:29:03][352554204393847][339 ms][DEBUG] SU: done in 338 ms; outu0_a118 11488 4968 23571528 67604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:29:03][352554204393847][339 ms][DEBUG] targetPkg: running [2025-08-25 12:29:03][352554204393847][339 ms][DEBUG] END check_scloud in 338 ms [2025-08-25 12:29:03][352554204393847][339 ms][DEBUG] START check_boot_completed [2025-08-25 12:29:03][352554204393847][339 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:29:03][352554204393847][386 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:29:03][352554204393847][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:29:03][352554204393847][433 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:29:03][352554204393847][433 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:29:03][352554204393847][433 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:29:03][352554204393847][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352554204393847\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5579\"}'\'' -e'"" [2025-08-25 12:29:03][352554204393847][433 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:29:03][352554204393847][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352554204393847\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5579\"}'\'' -e'"" [2025-08-25 12:29:07][352554204393847][4807 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f19cc37e-6b55-4526-9a97-39f45bc07a01","id":"QR_f19cc37e-6b55-4526-9a97-39f45bc07a01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:29:07][352554204393847][4963 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-08-25 12:29:07][352554204393847][4963 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-25 12:29:07][352554204393847][4963 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:30:04][350246952901861][0 ms][INFO] === Request start === [2025-08-25 12:30:04][350246952901861][1 ms][DEBUG] START check_scloud [2025-08-25 12:30:04][350246952901861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:30:04][350246952901861][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 11488 4968 23677100 91328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:30:04][350246952901861][270 ms][DEBUG] targetPkg: running [2025-08-25 12:30:04][350246952901861][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-25 12:30:04][350246952901861][270 ms][DEBUG] START check_boot_completed [2025-08-25 12:30:04][350246952901861][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:30:04][350246952901861][317 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:30:04][350246952901861][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:30:04][350246952901861][364 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:30:04][350246952901861][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:30:04][350246952901861][364 ms][DEBUG] START check_internet [2025-08-25 12:30:04][350246952901861][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:30:05][350246952901861][848 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.001/203.001/203.001/0.000 ms\n [2025-08-25 12:30:05][350246952901861][848 ms][DEBUG] check_internet: online [2025-08-25 12:30:05][350246952901861][848 ms][DEBUG] END check_internet in 484 ms [2025-08-25 12:30:05][350246952901861][848 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:30:05][350246952901861][848 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246952901861\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4547\"}'\'' -e'"" [2025-08-25 12:30:05][350246952901861][848 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:30:05][350246952901861][848 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350246952901861\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4547\"}'\'' -e'"" [2025-08-25 12:30:09][350246952901861][5487 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24d27596-a3ef-4896-9178-b08db9965038","id":"QR_24d27596-a3ef-4896-9178-b08db9965038","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:30:10][350246952901861][5644 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-25 12:30:10][350246952901861][5644 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-25 12:30:10][350246952901861][5644 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:31:04][359362970632734][1 ms][INFO] === Request start === [2025-08-25 12:31:04][359362970632734][1 ms][DEBUG] START check_scloud [2025-08-25 12:31:04][359362970632734][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:31:04][359362970632734][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 11488 4968 23820612 103992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:31:04][359362970632734][282 ms][DEBUG] targetPkg: running [2025-08-25 12:31:04][359362970632734][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-25 12:31:04][359362970632734][282 ms][DEBUG] START check_boot_completed [2025-08-25 12:31:04][359362970632734][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:31:04][359362970632734][313 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:31:04][359362970632734][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:31:04][359362970632734][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:31:04][359362970632734][360 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 12:31:04][359362970632734][360 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:31:04][359362970632734][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359362970632734\",\"model\":\"SM-A366U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6791\"}'\'' -e'"" [2025-08-25 12:31:04][359362970632734][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:31:04][359362970632734][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359362970632734\",\"model\":\"SM-A366U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6791\"}'\'' -e'"" [2025-08-25 12:31:10][359362970632734][5624 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45e21277-f145-4592-9ac9-849bb05e71c7","id":"QR_45e21277-f145-4592-9ac9-849bb05e71c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:31:10][359362970632734][5780 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-25 12:31:10][359362970632734][5780 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-08-25 12:31:10][359362970632734][5780 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:32:03][351978523141127][0 ms][INFO] === Request start === [2025-08-25 12:32:03][351978523141127][0 ms][DEBUG] START check_scloud [2025-08-25 12:32:03][351978523141127][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:32:03][351978523141127][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 11488 4968 23926120 114440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:32:03][351978523141127][321 ms][DEBUG] targetPkg: running [2025-08-25 12:32:03][351978523141127][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-25 12:32:03][351978523141127][322 ms][DEBUG] START check_boot_completed [2025-08-25 12:32:03][351978523141127][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:32:04][351978523141127][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:32:04][351978523141127][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:32:04][351978523141127][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:32:04][351978523141127][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:32:04][351978523141127][415 ms][DEBUG] START check_internet [2025-08-25 12:32:04][351978523141127][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:32:04][351978523141127][682 ms][DEBUG] SU: done in 267 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.112/175.112/175.112/0.000 ms\n [2025-08-25 12:32:04][351978523141127][682 ms][DEBUG] check_internet: online [2025-08-25 12:32:04][351978523141127][682 ms][DEBUG] END check_internet in 267 ms [2025-08-25 12:32:04][351978523141127][682 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:32:04][351978523141127][682 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523141127\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4262\"}'\'' -e'"" [2025-08-25 12:32:04][351978523141127][683 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:32:04][351978523141127][683 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523141127\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4262\"}'\'' -e'"" [2025-08-25 12:32:08][351978523141127][4976 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f69a906-36fd-4ad8-9086-d04f1c941e0a","id":"QR_4f69a906-36fd-4ad8-9086-d04f1c941e0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:32:08][351978523141127][5133 ms][DEBUG] proc_open done in 4450 ms; code=255; res.len=3343 [2025-08-25 12:32:08][351978523141127][5133 ms][DEBUG] END runCmdUntilRes#1 in 4450 ms [2025-08-25 12:32:08][351978523141127][5133 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:32:11][355322291933207][0 ms][INFO] === Request start === [2025-08-25 12:32:11][355322291933207][1 ms][DEBUG] START check_scloud [2025-08-25 12:32:11][355322291933207][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:32:11][355322291933207][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 11488 4968 24047336 124696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:32:11][355322291933207][267 ms][DEBUG] targetPkg: running [2025-08-25 12:32:11][355322291933207][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-25 12:32:11][355322291933207][267 ms][DEBUG] START check_boot_completed [2025-08-25 12:32:11][355322291933207][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:32:11][355322291933207][313 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:32:11][355322291933207][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:32:11][355322291933207][376 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:32:11][355322291933207][376 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:32:11][355322291933207][376 ms][DEBUG] START check_internet [2025-08-25 12:32:11][355322291933207][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:32:12][355322291933207][720 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.058/225.058/225.058/0.000 ms\n [2025-08-25 12:32:12][355322291933207][720 ms][DEBUG] check_internet: online [2025-08-25 12:32:12][355322291933207][720 ms][DEBUG] END check_internet in 344 ms [2025-08-25 12:32:12][355322291933207][720 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:32:12][355322291933207][720 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322291933207\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1801\"}'\'' -e'"" [2025-08-25 12:32:12][355322291933207][720 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:32:12][355322291933207][720 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322291933207\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1801\"}'\'' -e'"" [2025-08-25 12:32:16][355322291933207][5046 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_957ada98-c906-4889-8f8f-8ec7b5f7d12f","id":"QR_957ada98-c906-4889-8f8f-8ec7b5f7d12f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:32:16][355322291933207][5203 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-08-25 12:32:16][355322291933207][5203 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-25 12:32:16][355322291933207][5203 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:32:18][350530880014685][0 ms][INFO] === Request start === [2025-08-25 12:32:18][350530880014685][1 ms][DEBUG] START check_scloud [2025-08-25 12:32:18][350530880014685][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:32:19][350530880014685][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 11488 4968 24191856 135948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:32:19][350530880014685][319 ms][DEBUG] targetPkg: running [2025-08-25 12:32:19][350530880014685][319 ms][DEBUG] END check_scloud in 319 ms [2025-08-25 12:32:19][350530880014685][319 ms][DEBUG] START check_boot_completed [2025-08-25 12:32:19][350530880014685][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:32:19][350530880014685][350 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:32:19][350530880014685][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:32:19][350530880014685][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 12:32:19][350530880014685][398 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 12:32:19][350530880014685][398 ms][DEBUG] START check_internet [2025-08-25 12:32:19][350530880014685][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:32:19][350530880014685][725 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.016/201.016/201.016/0.000 ms\n [2025-08-25 12:32:19][350530880014685][726 ms][DEBUG] check_internet: online [2025-08-25 12:32:19][350530880014685][726 ms][DEBUG] END check_internet in 327 ms [2025-08-25 12:32:19][350530880014685][726 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:32:19][350530880014685][726 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350530880014685\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7323\"}'\'' -e'"" [2025-08-25 12:32:19][350530880014685][726 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:32:19][350530880014685][726 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350530880014685\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7323\"}'\'' -e'"" [2025-08-25 12:32:23][350530880014685][4521 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db03ce02-6dae-4990-a404-0de8f1f8ec7f","id":"QR_db03ce02-6dae-4990-a404-0de8f1f8ec7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:32:23][350530880014685][4678 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-25 12:32:23][350530880014685][4678 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-25 12:32:23][350530880014685][4678 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:32:26][352842931597057][0 ms][INFO] === Request start === [2025-08-25 12:32:26][352842931597057][1 ms][DEBUG] START check_scloud [2025-08-25 12:32:26][352842931597057][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:32:26][352842931597057][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 11488 4968 24332244 146856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:32:26][352842931597057][315 ms][DEBUG] targetPkg: running [2025-08-25 12:32:26][352842931597057][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 12:32:26][352842931597057][315 ms][DEBUG] START check_boot_completed [2025-08-25 12:32:26][352842931597057][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:32:26][352842931597057][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:32:26][352842931597057][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:32:26][352842931597057][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:32:26][352842931597057][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:32:26][352842931597057][424 ms][DEBUG] START check_internet [2025-08-25 12:32:26][352842931597057][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:32:26][352842931597057][846 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=272 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 272.345/272.345/272.345/0.000 ms\n [2025-08-25 12:32:26][352842931597057][846 ms][DEBUG] check_internet: online [2025-08-25 12:32:26][352842931597057][846 ms][DEBUG] END check_internet in 422 ms [2025-08-25 12:32:26][352842931597057][846 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:32:26][352842931597057][846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352842931597057\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1902\"}'\'' -e'"" [2025-08-25 12:32:26][352842931597057][846 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:32:26][352842931597057][846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352842931597057\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1902\"}'\'' -e'"" [2025-08-25 12:32:30][352842931597057][4735 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6f28838-2d59-49f1-be15-0a0771fd6579","id":"QR_c6f28838-2d59-49f1-be15-0a0771fd6579","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:32:31][352842931597057][4891 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-25 12:32:31][352842931597057][4891 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-25 12:32:31][352842931597057][4891 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:33:03][353684141381214][0 ms][INFO] === Request start === [2025-08-25 12:33:03][353684141381214][1 ms][DEBUG] START check_scloud [2025-08-25 12:33:03][353684141381214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:33:04][353684141381214][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 11488 4968 24446064 157524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:33:04][353684141381214][282 ms][DEBUG] targetPkg: running [2025-08-25 12:33:04][353684141381214][282 ms][DEBUG] END check_scloud in 282 ms [2025-08-25 12:33:04][353684141381214][282 ms][DEBUG] START check_boot_completed [2025-08-25 12:33:04][353684141381214][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:33:04][353684141381214][313 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:33:04][353684141381214][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:33:04][353684141381214][376 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 12:33:04][353684141381214][376 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 12:33:04][353684141381214][376 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:33:04][353684141381214][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141381214\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2073\"}'\'' -e'"" [2025-08-25 12:33:04][353684141381214][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:33:04][353684141381214][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141381214\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2073\"}'\'' -e'"" [2025-08-25 12:33:08][353684141381214][4484 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e438216-9ea1-47a3-be0a-d5d921ce2032","id":"QR_7e438216-9ea1-47a3-be0a-d5d921ce2032","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:33:08][353684141381214][4641 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 12:33:08][353684141381214][4641 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 12:33:08][353684141381214][4641 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:34:03][350637545019213][1 ms][INFO] === Request start === [2025-08-25 12:34:03][350637545019213][1 ms][DEBUG] START check_scloud [2025-08-25 12:34:03][350637545019213][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:34:03][350637545019213][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 11488 4968 24581336 169748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:34:03][350637545019213][283 ms][DEBUG] targetPkg: running [2025-08-25 12:34:03][350637545019213][283 ms][DEBUG] END check_scloud in 281 ms [2025-08-25 12:34:03][350637545019213][283 ms][DEBUG] START check_boot_completed [2025-08-25 12:34:03][350637545019213][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:34:03][350637545019213][329 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:34:03][350637545019213][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:34:03][350637545019213][392 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:34:03][350637545019213][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:34:03][350637545019213][392 ms][DEBUG] START check_internet [2025-08-25 12:34:03][350637545019213][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:34:03][350637545019213][892 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.627/202.627/202.627/0.000 ms\n [2025-08-25 12:34:03][350637545019213][892 ms][DEBUG] check_internet: online [2025-08-25 12:34:03][350637545019213][892 ms][DEBUG] END check_internet in 500 ms [2025-08-25 12:34:03][350637545019213][892 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:34:03][350637545019213][892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637545019213\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3434\"}'\'' -e'"" [2025-08-25 12:34:03][350637545019213][892 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:34:03][350637545019213][892 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637545019213\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3434\"}'\'' -e'"" [2025-08-25 12:34:08][350637545019213][5016 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c76405b7-3151-4833-b357-c537cbeea5ba","id":"QR_c76405b7-3151-4833-b357-c537cbeea5ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:34:08][350637545019213][5172 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-25 12:34:08][350637545019213][5172 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-25 12:34:08][350637545019213][5172 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:34:09][352923545159862][0 ms][INFO] === Request start === [2025-08-25 12:34:09][352923545159862][1 ms][DEBUG] START check_scloud [2025-08-25 12:34:09][352923545159862][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:34:10][352923545159862][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 11488 4968 24762720 175876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:34:10][352923545159862][273 ms][DEBUG] targetPkg: running [2025-08-25 12:34:10][352923545159862][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-25 12:34:10][352923545159862][273 ms][DEBUG] START check_boot_completed [2025-08-25 12:34:10][352923545159862][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:34:10][352923545159862][320 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:34:10][352923545159862][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:34:10][352923545159862][413 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 12:34:10][352923545159862][413 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 12:34:10][352923545159862][413 ms][DEBUG] START check_internet [2025-08-25 12:34:10][352923545159862][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:34:10][352923545159862][694 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=160 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 160.602/160.602/160.602/0.000 ms\n [2025-08-25 12:34:10][352923545159862][694 ms][DEBUG] check_internet: online [2025-08-25 12:34:10][352923545159862][695 ms][DEBUG] END check_internet in 281 ms [2025-08-25 12:34:10][352923545159862][695 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:34:10][352923545159862][695 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923545159862\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7382\"}'\'' -e'"" [2025-08-25 12:34:10][352923545159862][695 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:34:10][352923545159862][695 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923545159862\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7382\"}'\'' -e'"" [2025-08-25 12:34:14][352923545159862][4990 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_444e4787-b8d3-4988-993d-f9c9d12dd949","id":"QR_444e4787-b8d3-4988-993d-f9c9d12dd949","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:34:15][352923545159862][5146 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-08-25 12:34:15][352923545159862][5146 ms][DEBUG] END runCmdUntilRes#1 in 4451 ms [2025-08-25 12:34:15][352923545159862][5146 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:37:03][352009445699833][1 ms][INFO] === Request start === [2025-08-25 12:37:03][352009445699833][1 ms][DEBUG] START check_scloud [2025-08-25 12:37:03][352009445699833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:37:03][352009445699833][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 11488 4968 24858144 187888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:37:03][352009445699833][303 ms][DEBUG] targetPkg: running [2025-08-25 12:37:03][352009445699833][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 12:37:03][352009445699833][303 ms][DEBUG] START check_boot_completed [2025-08-25 12:37:03][352009445699833][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:37:03][352009445699833][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:37:03][352009445699833][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:37:03][352009445699833][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:37:03][352009445699833][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 12:37:03][352009445699833][381 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:37:03][352009445699833][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009445699833\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9244\"}'\'' -e'"" [2025-08-25 12:37:03][352009445699833][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:37:03][352009445699833][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009445699833\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9244\"}'\'' -e'"" [2025-08-25 12:37:08][352009445699833][4895 ms][DEBUG] proc_open done in 4515 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 12:37:08][352009445699833][4895 ms][DEBUG] END runCmdUntilRes#1 in 4515 ms [2025-08-25 12:37:08][352009445699833][4895 ms][WARN] Detected error: Process with pid 11488 either refused to load frida-agent, or terminated during injection [2025-08-25 12:37:08][352009445699833][4895 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 12:37:08][352009445699833][5036 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 12:37:08][352009445699833][5036 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 12:37:08][352009445699833][5036 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 12:37:08][352009445699833][5177 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 12:37:08][352009445699833][5177 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 12:37:08][352009445699833][5348 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 12:37:10][352009445699833][7363 ms][DEBUG] START check_boot_completed [2025-08-25 12:37:10][352009445699833][7363 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:37:10][352009445699833][7410 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:37:10][352009445699833][7410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:37:10][352009445699833][7457 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:37:10][352009445699833][7457 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 12:37:13][352009445699833][10472 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 12:37:13][352009445699833][10472 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009445699833\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9244\"}'\'' -e'"" [2025-08-25 12:37:17][352009445699833][14502 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a011fd5a-8439-421c-93e0-c05fbef0ed95","id":"QR_a011fd5a-8439-421c-93e0-c05fbef0ed95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:37:18][352009445699833][14659 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 12:37:18][352009445699833][14659 ms][DEBUG] END runCmdUntilRes#2 in 4187 ms [2025-08-25 12:37:18][352009445699833][14659 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:40:03][353196390063344][1 ms][INFO] === Request start === [2025-08-25 12:40:03][353196390063344][1 ms][DEBUG] START check_scloud [2025-08-25 12:40:03][353196390063344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:40:03][353196390063344][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 18160 4968 23574468 127276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:40:03][353196390063344][265 ms][DEBUG] targetPkg: running [2025-08-25 12:40:03][353196390063344][266 ms][DEBUG] END check_scloud in 264 ms [2025-08-25 12:40:03][353196390063344][266 ms][DEBUG] START check_boot_completed [2025-08-25 12:40:03][353196390063344][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:40:03][353196390063344][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:40:03][353196390063344][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:40:04][353196390063344][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:40:04][353196390063344][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:40:04][353196390063344][359 ms][DEBUG] START check_internet [2025-08-25 12:40:04][353196390063344][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:40:04][353196390063344][906 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.009/202.009/202.009/0.000 ms\n [2025-08-25 12:40:04][353196390063344][906 ms][DEBUG] check_internet: online [2025-08-25 12:40:04][353196390063344][906 ms][DEBUG] END check_internet in 547 ms [2025-08-25 12:40:04][353196390063344][906 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:40:04][353196390063344][906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196390063344\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7828\"}'\'' -e'"" [2025-08-25 12:40:04][353196390063344][906 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:40:04][353196390063344][906 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353196390063344\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7828\"}'\'' -e'"" [2025-08-25 12:40:08][353196390063344][5295 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aabdc837-00c7-469c-b34a-f5eb62c5d86c","id":"QR_aabdc837-00c7-469c-b34a-f5eb62c5d86c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:40:09][353196390063344][5452 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-08-25 12:40:09][353196390063344][5452 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-08-25 12:40:09][353196390063344][5452 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:43:03][352949520190440][1 ms][INFO] === Request start === [2025-08-25 12:43:03][352949520190440][1 ms][DEBUG] START check_scloud [2025-08-25 12:43:03][352949520190440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:43:03][352949520190440][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 18160 4968 23717096 138396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:43:03][352949520190440][300 ms][DEBUG] targetPkg: running [2025-08-25 12:43:03][352949520190440][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 12:43:03][352949520190440][300 ms][DEBUG] START check_boot_completed [2025-08-25 12:43:03][352949520190440][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:43:03][352949520190440][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:43:03][352949520190440][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:43:03][352949520190440][424 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 12:43:03][352949520190440][424 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 12:43:03][352949520190440][424 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:43:03][352949520190440][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520190440\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7239\"}'\'' -e'"" [2025-08-25 12:43:03][352949520190440][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:43:03][352949520190440][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949520190440\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7239\"}'\'' -e'"" [2025-08-25 12:43:07][352949520190440][4627 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29390cda-b1a1-4b77-998d-38166194eb8d","id":"QR_29390cda-b1a1-4b77-998d-38166194eb8d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:43:07][352949520190440][4783 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-25 12:43:07][352949520190440][4783 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-25 12:43:07][352949520190440][4783 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:45:03][352053267330994][0 ms][INFO] === Request start === [2025-08-25 12:45:03][352053267330994][1 ms][DEBUG] START check_scloud [2025-08-25 12:45:03][352053267330994][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:45:03][352053267330994][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 18160 4968 23885224 150452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:45:03][352053267330994][306 ms][DEBUG] targetPkg: running [2025-08-25 12:45:03][352053267330994][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 12:45:03][352053267330994][306 ms][DEBUG] START check_boot_completed [2025-08-25 12:45:03][352053267330994][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:45:03][352053267330994][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:45:03][352053267330994][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:45:03][352053267330994][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:45:03][352053267330994][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:45:03][352053267330994][415 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:45:03][352053267330994][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267330994\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9533\"}'\'' -e'"" [2025-08-25 12:45:03][352053267330994][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:45:03][352053267330994][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267330994\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9533\"}'\'' -e'"" [2025-08-25 12:45:08][352053267330994][5023 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5c791c6-bd0c-4bc0-adce-2c2edd4a9328","id":"QR_d5c791c6-bd0c-4bc0-adce-2c2edd4a9328","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:45:08][352053267330994][5180 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-08-25 12:45:08][352053267330994][5180 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-08-25 12:45:08][352053267330994][5180 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:46:03][352623173700504][1 ms][INFO] === Request start === [2025-08-25 12:46:03][352623173700504][1 ms][DEBUG] START check_scloud [2025-08-25 12:46:03][352623173700504][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:46:03][352623173700504][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18160 4968 24033740 161524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:46:03][352623173700504][313 ms][DEBUG] targetPkg: running [2025-08-25 12:46:03][352623173700504][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 12:46:03][352623173700504][313 ms][DEBUG] START check_boot_completed [2025-08-25 12:46:03][352623173700504][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:46:03][352623173700504][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:46:03][352623173700504][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:46:03][352623173700504][422 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 12:46:03][352623173700504][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:46:03][352623173700504][423 ms][DEBUG] START check_internet [2025-08-25 12:46:03][352623173700504][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:46:03][352623173700504][891 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.220/201.220/201.220/0.000 ms\n [2025-08-25 12:46:03][352623173700504][891 ms][DEBUG] check_internet: online [2025-08-25 12:46:03][352623173700504][891 ms][DEBUG] END check_internet in 468 ms [2025-08-25 12:46:03][352623173700504][891 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:46:03][352623173700504][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623173700504\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8249\"}'\'' -e'"" [2025-08-25 12:46:03][352623173700504][891 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:46:03][352623173700504][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623173700504\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8249\"}'\'' -e'"" [2025-08-25 12:46:08][352623173700504][5077 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7cb7aaf-03ce-4d33-ac09-84fb56eed903","id":"QR_c7cb7aaf-03ce-4d33-ac09-84fb56eed903","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:46:08][352623173700504][5234 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3343 [2025-08-25 12:46:08][352623173700504][5234 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-25 12:46:08][352623173700504][5234 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:46:11][357120480563555][0 ms][INFO] === Request start === [2025-08-25 12:46:11][357120480563555][1 ms][DEBUG] START check_scloud [2025-08-25 12:46:11][357120480563555][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:46:12][357120480563555][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18160 4968 24166100 162608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:46:12][357120480563555][313 ms][DEBUG] targetPkg: running [2025-08-25 12:46:12][357120480563555][313 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 12:46:12][357120480563555][313 ms][DEBUG] START check_boot_completed [2025-08-25 12:46:12][357120480563555][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:46:12][357120480563555][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:46:12][357120480563555][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:46:12][357120480563555][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:46:12][357120480563555][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:46:12][357120480563555][407 ms][DEBUG] START check_internet [2025-08-25 12:46:12][357120480563555][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:46:12][357120480563555][750 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.013/238.013/238.013/0.000 ms\n [2025-08-25 12:46:12][357120480563555][751 ms][DEBUG] check_internet: online [2025-08-25 12:46:12][357120480563555][751 ms][DEBUG] END check_internet in 344 ms [2025-08-25 12:46:12][357120480563555][751 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:46:12][357120480563555][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357120480563555\",\"model\":\"SM-F731U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5983\"}'\'' -e'"" [2025-08-25 12:46:12][357120480563555][751 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:46:12][357120480563555][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357120480563555\",\"model\":\"SM-F731U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5983\"}'\'' -e'"" [2025-08-25 12:46:17][357120480563555][5796 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8b183fd-03ce-4c34-949c-28c2301453ff","id":"QR_d8b183fd-03ce-4c34-949c-28c2301453ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:46:17][357120480563555][5952 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-25 12:46:17][357120480563555][5952 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-25 12:46:17][357120480563555][5952 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:50:04][357866601192696][1 ms][INFO] === Request start === [2025-08-25 12:50:04][357866601192696][1 ms][DEBUG] START check_scloud [2025-08-25 12:50:04][357866601192696][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:50:04][357866601192696][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18160 4968 24290196 166220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:50:04][357866601192696][305 ms][DEBUG] targetPkg: running [2025-08-25 12:50:04][357866601192696][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 12:50:04][357866601192696][305 ms][DEBUG] START check_boot_completed [2025-08-25 12:50:04][357866601192696][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:50:04][357866601192696][350 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 12:50:04][357866601192696][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:50:04][357866601192696][428 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 12:50:04][357866601192696][428 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-25 12:50:04][357866601192696][429 ms][DEBUG] START check_internet [2025-08-25 12:50:04][357866601192696][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:50:05][357866601192696][1006 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.553/202.553/202.553/0.000 ms\n [2025-08-25 12:50:05][357866601192696][1006 ms][DEBUG] check_internet: online [2025-08-25 12:50:05][357866601192696][1006 ms][DEBUG] END check_internet in 578 ms [2025-08-25 12:50:05][357866601192696][1006 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:50:05][357866601192696][1006 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866601192696\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2033\"}'\'' -e'"" [2025-08-25 12:50:05][357866601192696][1006 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:50:05][357866601192696][1006 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866601192696\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2033\"}'\'' -e'"" [2025-08-25 12:50:09][357866601192696][5083 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b9e2131-c2e3-4e86-b6b1-3ac5ce56c846","id":"QR_6b9e2131-c2e3-4e86-b6b1-3ac5ce56c846","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:50:09][357866601192696][5240 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 12:50:09][357866601192696][5240 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 12:50:09][357866601192696][5240 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:53:03][355698111827988][1 ms][INFO] === Request start === [2025-08-25 12:53:03][355698111827988][1 ms][DEBUG] START check_scloud [2025-08-25 12:53:03][355698111827988][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:53:03][355698111827988][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 18160 4968 24401848 177340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:53:03][355698111827988][306 ms][DEBUG] targetPkg: running [2025-08-25 12:53:03][355698111827988][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 12:53:03][355698111827988][306 ms][DEBUG] START check_boot_completed [2025-08-25 12:53:03][355698111827988][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:53:03][355698111827988][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 12:53:03][355698111827988][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:53:03][355698111827988][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:53:03][355698111827988][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 12:53:03][355698111827988][384 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:53:03][355698111827988][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355698111827988\",\"model\":\"SM-A516B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1341\"}'\'' -e'"" [2025-08-25 12:53:03][355698111827988][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:53:03][355698111827988][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355698111827988\",\"model\":\"SM-A516B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1341\"}'\'' -e'"" [2025-08-25 12:53:08][355698111827988][4492 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05eeb635-1cbc-49af-af1b-ab3d2f8766b5","id":"QR_05eeb635-1cbc-49af-af1b-ab3d2f8766b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:53:08][355698111827988][4648 ms][DEBUG] proc_open done in 4265 ms; code=255; res.len=3343 [2025-08-25 12:53:08][355698111827988][4648 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-08-25 12:53:08][355698111827988][4648 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:55:03][354690578526527][1 ms][INFO] === Request start === [2025-08-25 12:55:03][354690578526527][1 ms][DEBUG] START check_scloud [2025-08-25 12:55:03][354690578526527][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:55:03][354690578526527][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 18160 4968 24536092 189444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:55:03][354690578526527][284 ms][DEBUG] targetPkg: running [2025-08-25 12:55:03][354690578526527][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-25 12:55:03][354690578526527][284 ms][DEBUG] START check_boot_completed [2025-08-25 12:55:03][354690578526527][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:55:03][354690578526527][330 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 12:55:03][354690578526527][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:55:03][354690578526527][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:55:03][354690578526527][377 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 12:55:03][354690578526527][377 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:55:03][354690578526527][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690578526527\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3192\"}'\'' -e'"" [2025-08-25 12:55:03][354690578526527][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:55:03][354690578526527][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690578526527\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3192\"}'\'' -e'"" [2025-08-25 12:55:07][354690578526527][4486 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a90139e-0cc0-4f2e-914b-747886b1232f","id":"QR_6a90139e-0cc0-4f2e-914b-747886b1232f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:55:08][354690578526527][4642 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 12:55:08][354690578526527][4642 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-08-25 12:55:08][354690578526527][4642 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:56:04][350915067440342][0 ms][INFO] === Request start === [2025-08-25 12:56:04][350915067440342][1 ms][DEBUG] START check_scloud [2025-08-25 12:56:04][350915067440342][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:56:05][350915067440342][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 18160 4968 24686852 201148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:56:05][350915067440342][314 ms][DEBUG] targetPkg: running [2025-08-25 12:56:05][350915067440342][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 12:56:05][350915067440342][314 ms][DEBUG] START check_boot_completed [2025-08-25 12:56:05][350915067440342][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:56:05][350915067440342][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:56:05][350915067440342][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:56:05][350915067440342][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 12:56:05][350915067440342][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 12:56:05][350915067440342][407 ms][DEBUG] START check_internet [2025-08-25 12:56:05][350915067440342][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 12:56:05][350915067440342][923 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.999/202.999/202.999/0.000 ms\n [2025-08-25 12:56:05][350915067440342][923 ms][DEBUG] check_internet: online [2025-08-25 12:56:05][350915067440342][923 ms][DEBUG] END check_internet in 515 ms [2025-08-25 12:56:05][350915067440342][923 ms][DEBUG] rawBody.length=1149 [2025-08-25 12:56:05][350915067440342][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915067440342\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3561\"}'\'' -e'"" [2025-08-25 12:56:05][350915067440342][923 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:56:05][350915067440342][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915067440342\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3561\"}'\'' -e'"" [2025-08-25 12:56:17][350915067440342][12623 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba8cb18a-20a2-41e7-9b44-05ad887d8a37","id":"QR_ba8cb18a-20a2-41e7-9b44-05ad887d8a37","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:56:17][350915067440342][12779 ms][DEBUG] proc_open done in 11856 ms; code=255; res.len=3343 [2025-08-25 12:56:17][350915067440342][12779 ms][DEBUG] END runCmdUntilRes#1 in 11856 ms [2025-08-25 12:56:17][350915067440342][12780 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 12:59:02][359261100200273][1 ms][INFO] === Request start === [2025-08-25 12:59:02][359261100200273][1 ms][DEBUG] START check_scloud [2025-08-25 12:59:02][359261100200273][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 12:59:03][359261100200273][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 18160 4968 24813032 210128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 12:59:03][359261100200273][302 ms][DEBUG] targetPkg: running [2025-08-25 12:59:03][359261100200273][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 12:59:03][359261100200273][302 ms][DEBUG] START check_boot_completed [2025-08-25 12:59:03][359261100200273][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 12:59:03][359261100200273][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 12:59:03][359261100200273][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 12:59:03][359261100200273][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 12:59:03][359261100200273][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 12:59:03][359261100200273][411 ms][DEBUG] rawBody.length=1148 [2025-08-25 12:59:03][359261100200273][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359261100200273\",\"model\":\"SM-N976B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"OPS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7513\"}'\'' -e'"" [2025-08-25 12:59:03][359261100200273][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 12:59:03][359261100200273][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359261100200273\",\"model\":\"SM-N976B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"OPS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7513\"}'\'' -e'"" [2025-08-25 12:59:07][359261100200273][4863 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01efd983-5fdb-4a65-9c56-db2e07d2658b","id":"QR_01efd983-5fdb-4a65-9c56-db2e07d2658b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 12:59:08][359261100200273][5019 ms][DEBUG] proc_open done in 4607 ms; code=255; res.len=3343 [2025-08-25 12:59:08][359261100200273][5019 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-08-25 12:59:08][359261100200273][5019 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:01:03][352001414772782][1 ms][INFO] === Request start === [2025-08-25 13:01:03][352001414772782][1 ms][DEBUG] START check_scloud [2025-08-25 13:01:03][352001414772782][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:01:03][352001414772782][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 18160 4968 24932940 220576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:01:03][352001414772782][293 ms][DEBUG] targetPkg: running [2025-08-25 13:01:03][352001414772782][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-25 13:01:03][352001414772782][293 ms][DEBUG] START check_boot_completed [2025-08-25 13:01:03][352001414772782][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:01:03][352001414772782][324 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:01:03][352001414772782][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:01:03][352001414772782][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:01:03][352001414772782][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:01:03][352001414772782][371 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:01:03][352001414772782][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001414772782\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2219\"}'\'' -e'"" [2025-08-25 13:01:03][352001414772782][371 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:01:03][352001414772782][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001414772782\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2219\"}'\'' -e'"" [2025-08-25 13:01:08][352001414772782][4559 ms][DEBUG] proc_open done in 4188 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 13:01:08][352001414772782][4559 ms][DEBUG] END runCmdUntilRes#1 in 4188 ms [2025-08-25 13:01:08][352001414772782][4560 ms][WARN] Detected error: Process with pid 18160 either refused to load frida-agent, or terminated during injection [2025-08-25 13:01:08][352001414772782][4560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 13:01:08][352001414772782][4699 ms][DEBUG] SU: done in 139 ms; out [2025-08-25 13:01:08][352001414772782][4699 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 13:01:08][352001414772782][4699 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:01:08][352001414772782][4839 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 13:01:08][352001414772782][4839 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:01:08][352001414772782][4996 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 13:01:10][352001414772782][7010 ms][DEBUG] START check_boot_completed [2025-08-25 13:01:10][352001414772782][7011 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:01:10][352001414772782][7057 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:01:10][352001414772782][7057 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:01:10][352001414772782][7106 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 13:01:10][352001414772782][7106 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-25 13:01:13][352001414772782][10119 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 13:01:13][352001414772782][10119 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001414772782\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2219\"}'\'' -e'"" [2025-08-25 13:01:18][352001414772782][14602 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_052f054a-d794-4931-8fe0-cdcb1f38148a","id":"QR_052f054a-d794-4931-8fe0-cdcb1f38148a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:01:18][352001414772782][14759 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-08-25 13:01:18][352001414772782][14759 ms][DEBUG] END runCmdUntilRes#2 in 4640 ms [2025-08-25 13:01:18][352001414772782][14759 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:03:04][350545464105378][1 ms][INFO] === Request start === [2025-08-25 13:03:04][350545464105378][1 ms][DEBUG] START check_scloud [2025-08-25 13:03:04][350545464105378][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:03:04][350545464105378][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 20249 4968 23571540 128584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:03:04][350545464105378][310 ms][DEBUG] targetPkg: running [2025-08-25 13:03:04][350545464105378][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 13:03:04][350545464105378][310 ms][DEBUG] START check_boot_completed [2025-08-25 13:03:04][350545464105378][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:03:04][350545464105378][355 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 13:03:04][350545464105378][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:03:04][350545464105378][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:03:04][350545464105378][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:03:04][350545464105378][403 ms][DEBUG] rawBody.length=1158 [2025-08-25 13:03:04][350545464105378][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545464105378\",\"model\":\"SM-T720\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52MB0BA0CR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AUT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8727\"}'\'' -e'"" [2025-08-25 13:03:04][350545464105378][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:03:04][350545464105378][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545464105378\",\"model\":\"SM-T720\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52MB0BA0CR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AUT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8727\"}'\'' -e'"" [2025-08-25 13:03:08][350545464105378][4448 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f7decbe3-f6ed-45c2-8886-39b7d2394d33","id":"QR_f7decbe3-f6ed-45c2-8886-39b7d2394d33","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:03:08][350545464105378][4604 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-25 13:03:08][350545464105378][4604 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 13:03:08][350545464105378][4604 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:03:11][354651106680038][0 ms][INFO] === Request start === [2025-08-25 13:03:11][354651106680038][0 ms][DEBUG] START check_scloud [2025-08-25 13:03:11][354651106680038][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:03:11][354651106680038][275 ms][DEBUG] SU: done in 275 ms; outu0_a118 20249 4968 23728080 139456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:03:11][354651106680038][276 ms][DEBUG] targetPkg: running [2025-08-25 13:03:11][354651106680038][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-25 13:03:11][354651106680038][276 ms][DEBUG] START check_boot_completed [2025-08-25 13:03:11][354651106680038][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:03:11][354651106680038][322 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:03:11][354651106680038][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:03:11][354651106680038][385 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:03:11][354651106680038][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:03:11][354651106680038][385 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:03:11][354651106680038][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354651106680038\",\"model\":\"SM-G975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3588\"}'\'' -e'"" [2025-08-25 13:03:11][354651106680038][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:03:11][354651106680038][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354651106680038\",\"model\":\"SM-G975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3588\"}'\'' -e'"" [2025-08-25 13:03:15][354651106680038][4274 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60d3b521-2e21-4274-a613-e4c9bf3b6cc2","id":"QR_60d3b521-2e21-4274-a613-e4c9bf3b6cc2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:03:15][354651106680038][4430 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-25 13:03:15][354651106680038][4430 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-25 13:03:15][354651106680038][4431 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:04:03][352288965431732][0 ms][INFO] === Request start === [2025-08-25 13:04:03][352288965431732][1 ms][DEBUG] START check_scloud [2025-08-25 13:04:03][352288965431732][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:04:04][352288965431732][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 20249 4968 23855148 151152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:04:04][352288965431732][271 ms][DEBUG] targetPkg: running [2025-08-25 13:04:04][352288965431732][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-25 13:04:04][352288965431732][271 ms][DEBUG] START check_boot_completed [2025-08-25 13:04:04][352288965431732][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:04:04][352288965431732][317 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:04:04][352288965431732][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:04:04][352288965431732][364 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:04:04][352288965431732][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:04:04][352288965431732][364 ms][DEBUG] START check_internet [2025-08-25 13:04:04][352288965431732][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:04:04][352288965431732][849 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.050/202.050/202.050/0.000 ms\n [2025-08-25 13:04:04][352288965431732][849 ms][DEBUG] check_internet: online [2025-08-25 13:04:04][352288965431732][849 ms][DEBUG] END check_internet in 485 ms [2025-08-25 13:04:04][352288965431732][849 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:04:04][352288965431732][849 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288965431732\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3828\"}'\'' -e'"" [2025-08-25 13:04:04][352288965431732][849 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:04:04][352288965431732][849 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288965431732\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3828\"}'\'' -e'"" [2025-08-25 13:04:09][352288965431732][5207 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c33038d4-969d-40ae-892c-d2fce67e29c6","id":"QR_c33038d4-969d-40ae-892c-d2fce67e29c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:04:09][352288965431732][5363 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-08-25 13:04:09][352288965431732][5363 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-08-25 13:04:09][352288965431732][5363 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:05:03][357962509699195][1 ms][INFO] === Request start === [2025-08-25 13:05:03][357962509699195][1 ms][DEBUG] START check_scloud [2025-08-25 13:05:03][357962509699195][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:05:04][357962509699195][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 20249 4968 23958672 161780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:05:04][357962509699195][282 ms][DEBUG] targetPkg: running [2025-08-25 13:05:04][357962509699195][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-25 13:05:04][357962509699195][282 ms][DEBUG] START check_boot_completed [2025-08-25 13:05:04][357962509699195][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:05:04][357962509699195][329 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:05:04][357962509699195][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:05:04][357962509699195][406 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 13:05:04][357962509699195][406 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 13:05:04][357962509699195][406 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:05:04][357962509699195][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509699195\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1717\"}'\'' -e'"" [2025-08-25 13:05:04][357962509699195][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:05:04][357962509699195][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509699195\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1717\"}'\'' -e'"" [2025-08-25 13:05:08][357962509699195][4780 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a65cfb42-3793-41e8-868c-640901c2b549","id":"QR_a65cfb42-3793-41e8-868c-640901c2b549","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:05:08][357962509699195][4937 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-08-25 13:05:08][357962509699195][4937 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-25 13:05:08][357962509699195][4937 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:06:03][351978521523557][1 ms][INFO] === Request start === [2025-08-25 13:06:03][351978521523557][1 ms][DEBUG] START check_scloud [2025-08-25 13:06:03][351978521523557][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:06:03][351978521523557][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 20249 4968 24121716 172412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:06:03][351978521523557][312 ms][DEBUG] targetPkg: running [2025-08-25 13:06:03][351978521523557][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 13:06:03][351978521523557][312 ms][DEBUG] START check_boot_completed [2025-08-25 13:06:03][351978521523557][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:06:03][351978521523557][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:06:03][351978521523557][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:06:03][351978521523557][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:06:03][351978521523557][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:06:03][351978521523557][405 ms][DEBUG] START check_internet [2025-08-25 13:06:03][351978521523557][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:06:04][351978521523557][905 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.903/202.903/202.903/0.000 ms\n [2025-08-25 13:06:04][351978521523557][906 ms][DEBUG] check_internet: online [2025-08-25 13:06:04][351978521523557][906 ms][DEBUG] END check_internet in 500 ms [2025-08-25 13:06:04][351978521523557][906 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:06:04][351978521523557][906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521523557\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1423\"}'\'' -e'"" [2025-08-25 13:06:04][351978521523557][906 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:06:04][351978521523557][906 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521523557\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1423\"}'\'' -e'"" [2025-08-25 13:06:08][351978521523557][4904 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e851b888-aed0-46fb-afcf-750eab2db181","id":"QR_e851b888-aed0-46fb-afcf-750eab2db181","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:06:08][351978521523557][5060 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-25 13:06:08][351978521523557][5061 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-25 13:06:08][351978521523557][5061 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:07:03][350832442648806][0 ms][INFO] === Request start === [2025-08-25 13:07:03][350832442648806][1 ms][DEBUG] START check_scloud [2025-08-25 13:07:03][350832442648806][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:07:03][350832442648806][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 20249 4968 24263184 182960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:07:03][350832442648806][294 ms][DEBUG] targetPkg: running [2025-08-25 13:07:03][350832442648806][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-25 13:07:03][350832442648806][294 ms][DEBUG] START check_boot_completed [2025-08-25 13:07:03][350832442648806][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:07:03][350832442648806][341 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:07:03][350832442648806][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:07:04][350832442648806][419 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 13:07:04][350832442648806][419 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 13:07:04][350832442648806][419 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:07:04][350832442648806][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442648806\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4205\"}'\'' -e'"" [2025-08-25 13:07:04][350832442648806][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:07:04][350832442648806][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442648806\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4205\"}'\'' -e'"" [2025-08-25 13:07:08][350832442648806][4746 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a10636e7-ee23-42b1-a31f-e06ecb6a42a4","id":"QR_a10636e7-ee23-42b1-a31f-e06ecb6a42a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:07:08][350832442648806][4902 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-25 13:07:08][350832442648806][4902 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-25 13:07:08][350832442648806][4902 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:07:12][354680116267106][0 ms][INFO] === Request start === [2025-08-25 13:07:12][354680116267106][1 ms][DEBUG] START check_scloud [2025-08-25 13:07:12][354680116267106][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:07:12][354680116267106][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 20249 4968 24399512 193784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:07:12][354680116267106][261 ms][DEBUG] targetPkg: running [2025-08-25 13:07:12][354680116267106][261 ms][DEBUG] END check_scloud in 261 ms [2025-08-25 13:07:12][354680116267106][261 ms][DEBUG] START check_boot_completed [2025-08-25 13:07:12][354680116267106][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:07:12][354680116267106][324 ms][DEBUG] ADB: done in 62 ms; out [2025-08-25 13:07:12][354680116267106][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:07:12][354680116267106][370 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:07:12][354680116267106][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:07:12][354680116267106][370 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:07:12][354680116267106][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354680116267106\",\"model\":\"SM-G980F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9243\"}'\'' -e'"" [2025-08-25 13:07:12][354680116267106][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:07:12][354680116267106][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354680116267106\",\"model\":\"SM-G980F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9243\"}'\'' -e'"" [2025-08-25 13:07:19][354680116267106][6744 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ae166b4-7546-4369-8307-4e8b384e924f","id":"QR_0ae166b4-7546-4369-8307-4e8b384e924f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:07:19][354680116267106][6900 ms][DEBUG] proc_open done in 6530 ms; code=255; res.len=3343 [2025-08-25 13:07:19][354680116267106][6900 ms][DEBUG] END runCmdUntilRes#1 in 6530 ms [2025-08-25 13:07:19][354680116267106][6900 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:11:03][351494692350622][1 ms][INFO] === Request start === [2025-08-25 13:11:03][351494692350622][1 ms][DEBUG] START check_scloud [2025-08-25 13:11:03][351494692350622][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:11:03][351494692350622][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 20249 4968 24521432 205720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:11:03][351494692350622][297 ms][DEBUG] targetPkg: running [2025-08-25 13:11:03][351494692350622][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 13:11:03][351494692350622][297 ms][DEBUG] START check_boot_completed [2025-08-25 13:11:03][351494692350622][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:11:04][351494692350622][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:11:04][351494692350622][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:11:04][351494692350622][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:11:04][351494692350622][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:11:04][351494692350622][375 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:11:04][351494692350622][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351494692350622\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1944\"}'\'' -e'"" [2025-08-25 13:11:04][351494692350622][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:11:04][351494692350622][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351494692350622\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1944\"}'\'' -e'"" [2025-08-25 13:11:08][351494692350622][4812 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_472847ee-5dd3-4753-bb2a-8d92c941a9d6","id":"QR_472847ee-5dd3-4753-bb2a-8d92c941a9d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:11:08][351494692350622][4968 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-25 13:11:08][351494692350622][4968 ms][DEBUG] END runCmdUntilRes#1 in 4593 ms [2025-08-25 13:11:08][351494692350622][4968 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:12:03][350753204004667][1 ms][INFO] === Request start === [2025-08-25 13:12:03][350753204004667][1 ms][DEBUG] START check_scloud [2025-08-25 13:12:03][350753204004667][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:12:03][350753204004667][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 20249 4968 24675644 216024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:12:03][350753204004667][306 ms][DEBUG] targetPkg: running [2025-08-25 13:12:03][350753204004667][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 13:12:03][350753204004667][306 ms][DEBUG] START check_boot_completed [2025-08-25 13:12:03][350753204004667][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:12:03][350753204004667][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:12:03][350753204004667][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:12:03][350753204004667][402 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 13:12:03][350753204004667][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 13:12:03][350753204004667][402 ms][DEBUG] START check_internet [2025-08-25 13:12:03][350753204004667][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:12:04][350753204004667][931 ms][DEBUG] SU: done in 529 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.181/202.181/202.181/0.000 ms\n [2025-08-25 13:12:04][350753204004667][931 ms][DEBUG] check_internet: online [2025-08-25 13:12:04][350753204004667][931 ms][DEBUG] END check_internet in 529 ms [2025-08-25 13:12:04][350753204004667][931 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:12:04][350753204004667][931 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753204004667\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1018\"}'\'' -e'"" [2025-08-25 13:12:04][350753204004667][932 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:12:04][350753204004667][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350753204004667\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1018\"}'\'' -e'"" [2025-08-25 13:12:08][350753204004667][5164 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7dfd6409-c0aa-4bc2-b9d8-767d17b6f1f8","id":"QR_7dfd6409-c0aa-4bc2-b9d8-767d17b6f1f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:12:08][350753204004667][5320 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-25 13:12:08][350753204004667][5320 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-25 13:12:08][350753204004667][5321 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:14:03][358104902325438][1 ms][INFO] === Request start === [2025-08-25 13:14:03][358104902325438][1 ms][DEBUG] START check_scloud [2025-08-25 13:14:03][358104902325438][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:14:03][358104902325438][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 20249 4968 24779296 226416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:14:03][358104902325438][262 ms][DEBUG] targetPkg: running [2025-08-25 13:14:03][358104902325438][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-25 13:14:03][358104902325438][262 ms][DEBUG] START check_boot_completed [2025-08-25 13:14:03][358104902325438][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:14:03][358104902325438][309 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:14:03][358104902325438][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:14:03][358104902325438][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:14:03][358104902325438][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:14:03][358104902325438][355 ms][DEBUG] START check_internet [2025-08-25 13:14:03][358104902325438][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:14:04][358104902325438][715 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.356/252.356/252.356/0.000 ms\n [2025-08-25 13:14:04][358104902325438][715 ms][DEBUG] check_internet: online [2025-08-25 13:14:04][358104902325438][715 ms][DEBUG] END check_internet in 359 ms [2025-08-25 13:14:04][358104902325438][715 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:14:04][358104902325438][715 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902325438\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1034\"}'\'' -e'"" [2025-08-25 13:14:04][358104902325438][715 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:14:04][358104902325438][715 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902325438\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1034\"}'\'' -e'"" [2025-08-25 13:14:08][358104902325438][4995 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_429d885a-7e97-4ad5-8fe3-f18ea34044c0","id":"QR_429d885a-7e97-4ad5-8fe3-f18ea34044c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:14:08][358104902325438][5151 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-25 13:14:08][358104902325438][5151 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-25 13:14:08][358104902325438][5151 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:15:03][356414816035268][0 ms][INFO] === Request start === [2025-08-25 13:15:03][356414816035268][1 ms][DEBUG] START check_scloud [2025-08-25 13:15:03][356414816035268][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:15:04][356414816035268][324 ms][DEBUG] SU: done in 324 ms; outu0_a118 20249 4968 24915720 224220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:15:04][356414816035268][324 ms][DEBUG] targetPkg: running [2025-08-25 13:15:04][356414816035268][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-25 13:15:04][356414816035268][325 ms][DEBUG] START check_boot_completed [2025-08-25 13:15:04][356414816035268][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:15:04][356414816035268][371 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:15:04][356414816035268][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:15:04][356414816035268][418 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:15:04][356414816035268][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:15:04][356414816035268][418 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:15:04][356414816035268][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816035268\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8963\"}'\'' -e'"" [2025-08-25 13:15:04][356414816035268][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:15:04][356414816035268][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816035268\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8963\"}'\'' -e'"" [2025-08-25 13:15:08][356414816035268][4308 ms][DEBUG] proc_open done in 3890 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 13:15:08][356414816035268][4308 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-25 13:15:08][356414816035268][4308 ms][WARN] Detected error: Process with pid 20249 either refused to load frida-agent, or terminated during injection [2025-08-25 13:15:08][356414816035268][4308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 13:15:08][356414816035268][4448 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 13:15:08][356414816035268][4449 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 13:15:08][356414816035268][4449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:15:08][356414816035268][4589 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 13:15:08][356414816035268][4589 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:15:08][356414816035268][4778 ms][DEBUG] SU: done in 189 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 13:15:10][356414816035268][6791 ms][DEBUG] START check_boot_completed [2025-08-25 13:15:10][356414816035268][6791 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:15:10][356414816035268][6838 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:15:10][356414816035268][6838 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:15:10][356414816035268][6885 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:15:10][356414816035268][6885 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 13:15:13][356414816035268][9900 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 13:15:13][356414816035268][9900 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414816035268\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8963\"}'\'' -e'"" [2025-08-25 13:15:18][356414816035268][14087 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5bec8dc-5ac0-4496-9320-2022fa8dab5a","id":"QR_c5bec8dc-5ac0-4496-9320-2022fa8dab5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:15:18][356414816035268][14243 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3343 [2025-08-25 13:15:18][356414816035268][14243 ms][DEBUG] END runCmdUntilRes#2 in 4343 ms [2025-08-25 13:15:18][356414816035268][14243 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:16:03][355088851920039][0 ms][INFO] === Request start === [2025-08-25 13:16:03][355088851920039][1 ms][DEBUG] START check_scloud [2025-08-25 13:16:03][355088851920039][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:16:03][355088851920039][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 22515 4968 23544396 128296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:16:03][355088851920039][294 ms][DEBUG] targetPkg: running [2025-08-25 13:16:03][355088851920039][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-25 13:16:03][355088851920039][294 ms][DEBUG] START check_boot_completed [2025-08-25 13:16:03][355088851920039][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:16:03][355088851920039][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:16:03][355088851920039][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:16:03][355088851920039][434 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 13:16:03][355088851920039][435 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 13:16:03][355088851920039][435 ms][DEBUG] START check_internet [2025-08-25 13:16:03][355088851920039][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:16:04][355088851920039][934 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.611/199.611/199.611/0.000 ms\n [2025-08-25 13:16:04][355088851920039][934 ms][DEBUG] check_internet: online [2025-08-25 13:16:04][355088851920039][934 ms][DEBUG] END check_internet in 500 ms [2025-08-25 13:16:04][355088851920039][934 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:16:04][355088851920039][934 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088851920039\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2688\"}'\'' -e'"" [2025-08-25 13:16:04][355088851920039][934 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:16:04][355088851920039][934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088851920039\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2688\"}'\'' -e'"" [2025-08-25 13:16:08][355088851920039][4886 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d0aa697-f6f3-44d6-8fb8-825c014636b0","id":"QR_4d0aa697-f6f3-44d6-8fb8-825c014636b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:16:08][355088851920039][5043 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-25 13:16:08][355088851920039][5043 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-25 13:16:08][355088851920039][5043 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:17:03][352795330509356][1 ms][INFO] === Request start === [2025-08-25 13:17:03][352795330509356][1 ms][DEBUG] START check_scloud [2025-08-25 13:17:03][352795330509356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:17:03][352795330509356][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 22515 4968 23682736 138632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:17:03][352795330509356][259 ms][DEBUG] targetPkg: running [2025-08-25 13:17:03][352795330509356][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-25 13:17:03][352795330509356][259 ms][DEBUG] START check_boot_completed [2025-08-25 13:17:03][352795330509356][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:17:03][352795330509356][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:17:03][352795330509356][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:17:03][352795330509356][384 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 13:17:03][352795330509356][384 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 13:17:03][352795330509356][384 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:17:03][352795330509356][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352795330509356\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9618\"}'\'' -e'"" [2025-08-25 13:17:03][352795330509356][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:17:03][352795330509356][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352795330509356\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9618\"}'\'' -e'"" [2025-08-25 13:17:07][352795330509356][4445 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ff6b185-f4f2-4112-aaeb-066c7799ab17","id":"QR_2ff6b185-f4f2-4112-aaeb-066c7799ab17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:17:08][352795330509356][4601 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-25 13:17:08][352795330509356][4602 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-25 13:17:08][352795330509356][4602 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:19:03][351824388108506][0 ms][INFO] === Request start === [2025-08-25 13:19:03][351824388108506][0 ms][DEBUG] START check_scloud [2025-08-25 13:19:03][351824388108506][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:19:03][351824388108506][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 22515 4968 23777032 150620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:19:03][351824388108506][309 ms][DEBUG] targetPkg: running [2025-08-25 13:19:03][351824388108506][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 13:19:03][351824388108506][309 ms][DEBUG] START check_boot_completed [2025-08-25 13:19:03][351824388108506][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:19:03][351824388108506][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:19:03][351824388108506][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:19:03][351824388108506][433 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 13:19:03][351824388108506][433 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 13:19:03][351824388108506][433 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:19:03][351824388108506][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351824388108506\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1311\"}'\'' -e'"" [2025-08-25 13:19:03][351824388108506][434 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:19:03][351824388108506][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351824388108506\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1311\"}'\'' -e'"" [2025-08-25 13:19:08][351824388108506][4573 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6e9ca49-b8c9-4361-af3f-4a30f4f7d70b","id":"QR_f6e9ca49-b8c9-4361-af3f-4a30f4f7d70b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:19:08][351824388108506][4729 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-25 13:19:08][351824388108506][4729 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-25 13:19:08][351824388108506][4729 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:19:10][351234165451642][0 ms][INFO] === Request start === [2025-08-25 13:19:10][351234165451642][1 ms][DEBUG] START check_scloud [2025-08-25 13:19:10][351234165451642][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:19:11][351234165451642][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 22515 4968 23931920 161636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:19:11][351234165451642][315 ms][DEBUG] targetPkg: running [2025-08-25 13:19:11][351234165451642][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 13:19:11][351234165451642][315 ms][DEBUG] START check_boot_completed [2025-08-25 13:19:11][351234165451642][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:19:11][351234165451642][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:19:11][351234165451642][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:19:11][351234165451642][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:19:11][351234165451642][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:19:11][351234165451642][424 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:19:11][351234165451642][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234165451642\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1709\"}'\'' -e'"" [2025-08-25 13:19:11][351234165451642][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:19:11][351234165451642][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234165451642\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1709\"}'\'' -e'"" [2025-08-25 13:19:15][351234165451642][4298 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7cceb0bc-efbf-4529-a859-8bc582197eb7","id":"QR_7cceb0bc-efbf-4529-a859-8bc582197eb7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:19:15][351234165451642][4455 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-25 13:19:15][351234165451642][4455 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-25 13:19:15][351234165451642][4455 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:21:03][354360418997896][0 ms][INFO] === Request start === [2025-08-25 13:21:03][354360418997896][1 ms][DEBUG] START check_scloud [2025-08-25 13:21:03][354360418997896][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:21:04][354360418997896][282 ms][DEBUG] SU: done in 282 ms; outu0_a118 22515 4968 24045776 172760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:21:04][354360418997896][282 ms][DEBUG] targetPkg: running [2025-08-25 13:21:04][354360418997896][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-25 13:21:04][354360418997896][283 ms][DEBUG] START check_boot_completed [2025-08-25 13:21:04][354360418997896][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:21:04][354360418997896][312 ms][DEBUG] ADB: done in 30 ms; out [2025-08-25 13:21:04][354360418997896][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:21:04][354360418997896][375 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 13:21:04][354360418997896][375 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 13:21:04][354360418997896][375 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:21:04][354360418997896][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418997896\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1315\"}'\'' -e'"" [2025-08-25 13:21:04][354360418997896][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:21:04][354360418997896][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418997896\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1315\"}'\'' -e'"" [2025-08-25 13:21:08][354360418997896][4608 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9adaf538-e175-4fa4-a833-de8906e6e06a","id":"QR_9adaf538-e175-4fa4-a833-de8906e6e06a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:21:08][354360418997896][4764 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-25 13:21:08][354360418997896][4764 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-25 13:21:08][354360418997896][4764 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:23:03][351681597832346][1 ms][INFO] === Request start === [2025-08-25 13:23:03][351681597832346][1 ms][DEBUG] START check_scloud [2025-08-25 13:23:03][351681597832346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:23:04][351681597832346][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 22515 4968 24161524 185128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:23:04][351681597832346][307 ms][DEBUG] targetPkg: running [2025-08-25 13:23:04][351681597832346][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 13:23:04][351681597832346][307 ms][DEBUG] START check_boot_completed [2025-08-25 13:23:04][351681597832346][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:23:04][351681597832346][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:23:04][351681597832346][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:23:04][351681597832346][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:23:04][351681597832346][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:23:04][351681597832346][401 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:23:04][351681597832346][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681597832346\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4029\"}'\'' -e'"" [2025-08-25 13:23:04][351681597832346][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:23:04][351681597832346][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681597832346\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4029\"}'\'' -e'"" [2025-08-25 13:23:08][351681597832346][4493 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_537bcf27-77a3-4c80-97ed-0e1cc72d620d","id":"QR_537bcf27-77a3-4c80-97ed-0e1cc72d620d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:23:08][351681597832346][4650 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-25 13:23:08][351681597832346][4650 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-25 13:23:08][351681597832346][4650 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:23:11][357066604898353][0 ms][INFO] === Request start === [2025-08-25 13:23:11][357066604898353][1 ms][DEBUG] START check_scloud [2025-08-25 13:23:11][357066604898353][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:23:11][357066604898353][282 ms][DEBUG] SU: done in 282 ms; outu0_a118 22515 4968 24322428 195928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:23:11][357066604898353][282 ms][DEBUG] targetPkg: running [2025-08-25 13:23:11][357066604898353][282 ms][DEBUG] END check_scloud in 282 ms [2025-08-25 13:23:11][357066604898353][283 ms][DEBUG] START check_boot_completed [2025-08-25 13:23:11][357066604898353][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:23:11][357066604898353][329 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:23:11][357066604898353][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:23:11][357066604898353][377 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 13:23:11][357066604898353][377 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 13:23:11][357066604898353][377 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:23:11][357066604898353][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357066604898353\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3658\"}'\'' -e'"" [2025-08-25 13:23:11][357066604898353][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:23:11][357066604898353][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357066604898353\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3658\"}'\'' -e'"" [2025-08-25 13:23:15][357066604898353][4187 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98cfb339-8453-4278-a09a-fbeb978d6c15","id":"QR_98cfb339-8453-4278-a09a-fbeb978d6c15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:23:15][357066604898353][4344 ms][DEBUG] proc_open done in 3966 ms; code=255; res.len=3343 [2025-08-25 13:23:15][357066604898353][4344 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-25 13:23:15][357066604898353][4344 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:23:19][357651716183313][0 ms][INFO] === Request start === [2025-08-25 13:23:19][357651716183313][1 ms][DEBUG] START check_scloud [2025-08-25 13:23:19][357651716183313][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:23:19][357651716183313][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 22515 4968 24460932 207784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:23:19][357651716183313][299 ms][DEBUG] targetPkg: running [2025-08-25 13:23:19][357651716183313][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 13:23:19][357651716183313][299 ms][DEBUG] START check_boot_completed [2025-08-25 13:23:19][357651716183313][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:23:19][357651716183313][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:23:19][357651716183313][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:23:19][357651716183313][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:23:19][357651716183313][378 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 13:23:19][357651716183313][378 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:23:19][357651716183313][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651716183313\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-08-25 13:23:19][357651716183313][378 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:23:19][357651716183313][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651716183313\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-08-25 13:23:24][357651716183313][5376 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_32caca3f-5475-4066-95dd-716788ecd355","id":"QR_32caca3f-5475-4066-95dd-716788ecd355","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:23:24][357651716183313][5532 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-08-25 13:23:24][357651716183313][5532 ms][DEBUG] END runCmdUntilRes#1 in 5154 ms [2025-08-25 13:23:24][357651716183313][5532 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:24:04][353182208070267][0 ms][INFO] === Request start === [2025-08-25 13:24:04][353182208070267][1 ms][DEBUG] START check_scloud [2025-08-25 13:24:04][353182208070267][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:24:04][353182208070267][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22515 4968 24592992 218840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:24:04][353182208070267][308 ms][DEBUG] targetPkg: running [2025-08-25 13:24:04][353182208070267][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 13:24:04][353182208070267][308 ms][DEBUG] START check_boot_completed [2025-08-25 13:24:04][353182208070267][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:24:04][353182208070267][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:24:04][353182208070267][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:24:04][353182208070267][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:24:04][353182208070267][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:24:04][353182208070267][402 ms][DEBUG] START check_internet [2025-08-25 13:24:04][353182208070267][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:24:04][353182208070267][886 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.454/202.454/202.454/0.000 ms\n [2025-08-25 13:24:04][353182208070267][886 ms][DEBUG] check_internet: online [2025-08-25 13:24:04][353182208070267][886 ms][DEBUG] END check_internet in 485 ms [2025-08-25 13:24:04][353182208070267][887 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:24:04][353182208070267][887 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182208070267\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7035\"}'\'' -e'"" [2025-08-25 13:24:04][353182208070267][887 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:24:04][353182208070267][887 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182208070267\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7035\"}'\'' -e'"" [2025-08-25 13:24:09][353182208070267][5166 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf2cc5bd-821a-474f-b34a-8c46201a939f","id":"QR_bf2cc5bd-821a-474f-b34a-8c46201a939f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:24:09][353182208070267][5322 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-25 13:24:09][353182208070267][5322 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-25 13:24:09][353182208070267][5322 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:24:13][354818255662089][0 ms][INFO] === Request start === [2025-08-25 13:24:13][354818255662089][1 ms][DEBUG] START check_scloud [2025-08-25 13:24:13][354818255662089][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:24:13][354818255662089][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 22515 4968 24715116 230032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:24:13][354818255662089][304 ms][DEBUG] targetPkg: running [2025-08-25 13:24:13][354818255662089][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 13:24:13][354818255662089][304 ms][DEBUG] START check_boot_completed [2025-08-25 13:24:13][354818255662089][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:24:13][354818255662089][349 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 13:24:13][354818255662089][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:24:13][354818255662089][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:24:13][354818255662089][412 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 13:24:13][354818255662089][412 ms][DEBUG] START check_internet [2025-08-25 13:24:13][354818255662089][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:24:14][354818255662089][927 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.689/201.689/201.689/0.000 ms\n [2025-08-25 13:24:14][354818255662089][927 ms][DEBUG] check_internet: online [2025-08-25 13:24:14][354818255662089][927 ms][DEBUG] END check_internet in 515 ms [2025-08-25 13:24:14][354818255662089][927 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:24:14][354818255662089][927 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354818255662089\",\"model\":\"SM-S901W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1277\"}'\'' -e'"" [2025-08-25 13:24:14][354818255662089][927 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:24:14][354818255662089][927 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354818255662089\",\"model\":\"SM-S901W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1277\"}'\'' -e'"" [2025-08-25 13:24:24][354818255662089][11815 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9afc873a-0d1c-4cf5-8356-b9385f0aae3a","id":"QR_9afc873a-0d1c-4cf5-8356-b9385f0aae3a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:24:25][354818255662089][11971 ms][DEBUG] proc_open done in 11043 ms; code=255; res.len=3343 [2025-08-25 13:24:25][354818255662089][11971 ms][DEBUG] END runCmdUntilRes#1 in 11044 ms [2025-08-25 13:24:25][354818255662089][11971 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:25:03][352674520673506][0 ms][INFO] === Request start === [2025-08-25 13:25:03][352674520673506][1 ms][DEBUG] START check_scloud [2025-08-25 13:25:03][352674520673506][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:25:03][352674520673506][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 22515 4968 24841260 241220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:25:03][352674520673506][272 ms][DEBUG] targetPkg: running [2025-08-25 13:25:03][352674520673506][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-25 13:25:03][352674520673506][272 ms][DEBUG] START check_boot_completed [2025-08-25 13:25:03][352674520673506][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:25:03][352674520673506][303 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:25:03][352674520673506][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:25:03][352674520673506][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:25:03][352674520673506][350 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:25:03][352674520673506][350 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:25:03][352674520673506][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520673506\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3531\"}'\'' -e'"" [2025-08-25 13:25:03][352674520673506][351 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:25:03][352674520673506][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520673506\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3531\"}'\'' -e'"" [2025-08-25 13:25:07][352674520673506][4208 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 13:25:07][352674520673506][4208 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 13:25:07][352674520673506][4208 ms][WARN] Detected error: Process with pid 22515 either refused to load frida-agent, or terminated during injection [2025-08-25 13:25:07][352674520673506][4208 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 13:25:07][352674520673506][4365 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 13:25:07][352674520673506][4365 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 13:25:07][352674520673506][4365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:25:08][352674520673506][4505 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 13:25:08][352674520673506][4506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:25:08][352674520673506][4662 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 13:25:10][352674520673506][6677 ms][DEBUG] START check_boot_completed [2025-08-25 13:25:10][352674520673506][6677 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:25:10][352674520673506][6724 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:25:10][352674520673506][6724 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:25:10][352674520673506][6770 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:25:10][352674520673506][6771 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 13:25:13][352674520673506][9785 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 13:25:13][352674520673506][9785 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520673506\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3531\"}'\'' -e'"" [2025-08-25 13:25:17][352674520673506][13894 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33c6f928-9fa1-4e0d-b505-21d24b7215aa","id":"QR_33c6f928-9fa1-4e0d-b505-21d24b7215aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:25:17][352674520673506][14050 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 13:25:17][352674520673506][14050 ms][DEBUG] END runCmdUntilRes#2 in 4265 ms [2025-08-25 13:25:17][352674520673506][14050 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:25:20][352596763934420][1 ms][INFO] === Request start === [2025-08-25 13:25:20][352596763934420][1 ms][DEBUG] START check_scloud [2025-08-25 13:25:20][352596763934420][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:25:20][352596763934420][238 ms][DEBUG] SU: done in 237 ms; outu0_a118 23725 4968 23585180 125036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:25:20][352596763934420][238 ms][DEBUG] targetPkg: running [2025-08-25 13:25:20][352596763934420][238 ms][DEBUG] END check_scloud in 237 ms [2025-08-25 13:25:20][352596763934420][238 ms][DEBUG] START check_boot_completed [2025-08-25 13:25:20][352596763934420][238 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:25:20][352596763934420][269 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:25:20][352596763934420][269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:25:20][352596763934420][317 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:25:20][352596763934420][317 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:25:20][352596763934420][317 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:25:20][352596763934420][317 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352596763934420\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6066\"}'\'' -e'"" [2025-08-25 13:25:20][352596763934420][317 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:25:20][352596763934420][317 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352596763934420\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6066\"}'\'' -e'"" [2025-08-25 13:25:24][352596763934420][4081 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27bf618f-e8f3-4115-8071-529b447be7dc","id":"QR_27bf618f-e8f3-4115-8071-529b447be7dc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:25:24][352596763934420][4237 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-25 13:25:24][352596763934420][4237 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-25 13:25:24][352596763934420][4237 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:26:03][350900922082992][0 ms][INFO] === Request start === [2025-08-25 13:26:03][350900922082992][1 ms][DEBUG] START check_scloud [2025-08-25 13:26:03][350900922082992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:26:03][350900922082992][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 23725 4968 23657620 138704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:26:03][350900922082992][295 ms][DEBUG] targetPkg: running [2025-08-25 13:26:03][350900922082992][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-25 13:26:03][350900922082992][296 ms][DEBUG] START check_boot_completed [2025-08-25 13:26:03][350900922082992][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:26:03][350900922082992][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:26:03][350900922082992][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:26:03][350900922082992][404 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:26:03][350900922082992][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:26:03][350900922082992][405 ms][DEBUG] START check_internet [2025-08-25 13:26:03][350900922082992][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:26:03][350900922082992][764 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.657/249.657/249.657/0.000 ms\n [2025-08-25 13:26:03][350900922082992][764 ms][DEBUG] check_internet: online [2025-08-25 13:26:03][350900922082992][764 ms][DEBUG] END check_internet in 360 ms [2025-08-25 13:26:03][350900922082992][764 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:26:03][350900922082992][764 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900922082992\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6000\"}'\'' -e'"" [2025-08-25 13:26:03][350900922082992][764 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:26:03][350900922082992][764 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900922082992\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6000\"}'\'' -e'"" [2025-08-25 13:26:14][350900922082992][11449 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a3b1cb3-ac17-4bda-807d-9410f50c55ae","id":"QR_5a3b1cb3-ac17-4bda-807d-9410f50c55ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:26:14][350900922082992][11605 ms][DEBUG] proc_open done in 10841 ms; code=255; res.len=3343 [2025-08-25 13:26:14][350900922082992][11605 ms][DEBUG] END runCmdUntilRes#1 in 10841 ms [2025-08-25 13:26:14][350900922082992][11605 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:28:03][351824388119396][1 ms][INFO] === Request start === [2025-08-25 13:28:03][351824388119396][1 ms][DEBUG] START check_scloud [2025-08-25 13:28:03][351824388119396][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:28:03][351824388119396][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 23725 4968 23743532 150032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:28:03][351824388119396][308 ms][DEBUG] targetPkg: running [2025-08-25 13:28:03][351824388119396][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 13:28:03][351824388119396][308 ms][DEBUG] START check_boot_completed [2025-08-25 13:28:03][351824388119396][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:28:03][351824388119396][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:28:03][351824388119396][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:28:03][351824388119396][418 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 13:28:03][351824388119396][418 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 13:28:03][351824388119396][418 ms][DEBUG] START check_internet [2025-08-25 13:28:03][351824388119396][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:28:03][351824388119396][807 ms][DEBUG] SU: done in 389 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.774/256.774/256.774/0.000 ms\n [2025-08-25 13:28:03][351824388119396][808 ms][DEBUG] check_internet: online [2025-08-25 13:28:03][351824388119396][808 ms][DEBUG] END check_internet in 390 ms [2025-08-25 13:28:03][351824388119396][808 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:28:03][351824388119396][808 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351824388119396\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3980\"}'\'' -e'"" [2025-08-25 13:28:03][351824388119396][808 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:28:03][351824388119396][808 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351824388119396\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3980\"}'\'' -e'"" [2025-08-25 13:28:08][351824388119396][4962 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04cd9f59-3d70-4c60-a98d-c862ffcb7655","id":"QR_04cd9f59-3d70-4c60-a98d-c862ffcb7655","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:28:08][351824388119396][5119 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 13:28:08][351824388119396][5119 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 13:28:08][351824388119396][5119 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:28:10][353850474120624][0 ms][INFO] === Request start === [2025-08-25 13:28:10][353850474120624][1 ms][DEBUG] START check_scloud [2025-08-25 13:28:10][353850474120624][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:28:11][353850474120624][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 23725 4968 23898420 161196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:28:11][353850474120624][258 ms][DEBUG] targetPkg: running [2025-08-25 13:28:11][353850474120624][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-25 13:28:11][353850474120624][258 ms][DEBUG] START check_boot_completed [2025-08-25 13:28:11][353850474120624][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:28:11][353850474120624][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:28:11][353850474120624][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:28:11][353850474120624][398 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 13:28:11][353850474120624][398 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 13:28:11][353850474120624][398 ms][DEBUG] START check_internet [2025-08-25 13:28:11][353850474120624][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:28:11][353850474120624][710 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.277/203.277/203.277/0.000 ms\n [2025-08-25 13:28:11][353850474120624][711 ms][DEBUG] check_internet: online [2025-08-25 13:28:11][353850474120624][711 ms][DEBUG] END check_internet in 312 ms [2025-08-25 13:28:11][353850474120624][711 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:28:11][353850474120624][711 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353850474120624\",\"model\":\"SM-A155N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8393\"}'\'' -e'"" [2025-08-25 13:28:11][353850474120624][711 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:28:11][353850474120624][711 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353850474120624\",\"model\":\"SM-A155N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8393\"}'\'' -e'"" [2025-08-25 13:28:15][353850474120624][4600 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34f6df98-e59b-4e83-8a7d-4ee66d25c62d","id":"QR_34f6df98-e59b-4e83-8a7d-4ee66d25c62d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:28:15][353850474120624][4756 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-25 13:28:15][353850474120624][4756 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-25 13:28:15][353850474120624][4756 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:29:03][350386304682106][0 ms][INFO] === Request start === [2025-08-25 13:29:03][350386304682106][1 ms][DEBUG] START check_scloud [2025-08-25 13:29:03][350386304682106][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:29:04][350386304682106][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 23725 4968 24056692 172048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:29:04][350386304682106][290 ms][DEBUG] targetPkg: running [2025-08-25 13:29:04][350386304682106][290 ms][DEBUG] END check_scloud in 290 ms [2025-08-25 13:29:04][350386304682106][290 ms][DEBUG] START check_boot_completed [2025-08-25 13:29:04][350386304682106][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:29:04][350386304682106][321 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:29:04][350386304682106][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:29:04][350386304682106][368 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:29:04][350386304682106][368 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:29:04][350386304682106][368 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:29:04][350386304682106][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386304682106\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9994\"}'\'' -e'"" [2025-08-25 13:29:04][350386304682106][368 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:29:04][350386304682106][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386304682106\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9994\"}'\'' -e'"" [2025-08-25 13:29:08][350386304682106][4539 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45a6867a-c2ca-40cc-a4b9-931fef833c84","id":"QR_45a6867a-c2ca-40cc-a4b9-931fef833c84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:29:08][350386304682106][4695 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-08-25 13:29:08][350386304682106][4695 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-25 13:29:08][350386304682106][4695 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:29:11][352600225645150][0 ms][INFO] === Request start === [2025-08-25 13:29:11][352600225645150][1 ms][DEBUG] START check_scloud [2025-08-25 13:29:11][352600225645150][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:29:11][352600225645150][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 23725 4968 24236028 183808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:29:11][352600225645150][311 ms][DEBUG] targetPkg: running [2025-08-25 13:29:11][352600225645150][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 13:29:11][352600225645150][311 ms][DEBUG] START check_boot_completed [2025-08-25 13:29:11][352600225645150][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:29:11][352600225645150][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:29:11][352600225645150][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:29:11][352600225645150][405 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 13:29:11][352600225645150][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 13:29:11][352600225645150][406 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:29:11][352600225645150][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600225645150\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1640\"}'\'' -e'"" [2025-08-25 13:29:11][352600225645150][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:29:11][352600225645150][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600225645150\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1640\"}'\'' -e'"" [2025-08-25 13:29:15][352600225645150][4450 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_406bc9fb-9ed1-4a01-b892-70b37ea8fb35","id":"QR_406bc9fb-9ed1-4a01-b892-70b37ea8fb35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:29:15][352600225645150][4607 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-25 13:29:15][352600225645150][4607 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-25 13:29:15][352600225645150][4607 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:30:04][352600224254483][1 ms][INFO] === Request start === [2025-08-25 13:30:04][352600224254483][1 ms][DEBUG] START check_scloud [2025-08-25 13:30:04][352600224254483][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:30:04][352600224254483][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 23725 4968 24372284 194832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:30:04][352600224254483][266 ms][DEBUG] targetPkg: running [2025-08-25 13:30:04][352600224254483][267 ms][DEBUG] END check_scloud in 265 ms [2025-08-25 13:30:04][352600224254483][267 ms][DEBUG] START check_boot_completed [2025-08-25 13:30:04][352600224254483][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:30:04][352600224254483][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:30:04][352600224254483][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:30:04][352600224254483][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:30:04][352600224254483][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:30:04][352600224254483][360 ms][DEBUG] START check_internet [2025-08-25 13:30:04][352600224254483][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:30:05][352600224254483][844 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.496/203.496/203.496/0.000 ms\n [2025-08-25 13:30:05][352600224254483][844 ms][DEBUG] check_internet: online [2025-08-25 13:30:05][352600224254483][844 ms][DEBUG] END check_internet in 484 ms [2025-08-25 13:30:05][352600224254483][844 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:30:05][352600224254483][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224254483\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4364\"}'\'' -e'"" [2025-08-25 13:30:05][352600224254483][844 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:30:05][352600224254483][844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224254483\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4364\"}'\'' -e'"" [2025-08-25 13:30:09][352600224254483][4999 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9346774-9e4c-40c4-b590-7abbeee35b05","id":"QR_c9346774-9e4c-40c4-b590-7abbeee35b05","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:30:09][352600224254483][5156 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 13:30:09][352600224254483][5156 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 13:30:09][352600224254483][5156 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:31:03][350814495577652][0 ms][INFO] === Request start === [2025-08-25 13:31:03][350814495577652][1 ms][DEBUG] START check_scloud [2025-08-25 13:31:03][350814495577652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:31:03][350814495577652][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 23725 4968 24503584 206864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:31:03][350814495577652][275 ms][DEBUG] targetPkg: running [2025-08-25 13:31:03][350814495577652][275 ms][DEBUG] END check_scloud in 274 ms [2025-08-25 13:31:03][350814495577652][275 ms][DEBUG] START check_boot_completed [2025-08-25 13:31:03][350814495577652][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:31:03][350814495577652][321 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:31:03][350814495577652][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:31:03][350814495577652][370 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 13:31:03][350814495577652][370 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 13:31:03][350814495577652][370 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:31:03][350814495577652][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495577652\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3826\"}'\'' -e'"" [2025-08-25 13:31:03][350814495577652][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:31:03][350814495577652][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495577652\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3826\"}'\'' -e'"" [2025-08-25 13:31:07][350814495577652][4570 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_104e7c5e-19a3-4ad8-a279-83d8e48a8892","id":"QR_104e7c5e-19a3-4ad8-a279-83d8e48a8892","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:31:07][350814495577652][4726 ms][DEBUG] proc_open done in 4356 ms; code=255; res.len=3343 [2025-08-25 13:31:07][350814495577652][4726 ms][DEBUG] END runCmdUntilRes#1 in 4356 ms [2025-08-25 13:31:07][350814495577652][4727 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:31:09][353302723452093][0 ms][INFO] === Request start === [2025-08-25 13:31:09][353302723452093][1 ms][DEBUG] START check_scloud [2025-08-25 13:31:09][353302723452093][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:31:09][353302723452093][283 ms][DEBUG] SU: done in 283 ms; outu0_a118 23725 4968 24633896 217800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:31:09][353302723452093][283 ms][DEBUG] targetPkg: running [2025-08-25 13:31:09][353302723452093][283 ms][DEBUG] END check_scloud in 283 ms [2025-08-25 13:31:09][353302723452093][284 ms][DEBUG] START check_boot_completed [2025-08-25 13:31:09][353302723452093][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:31:09][353302723452093][330 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:31:09][353302723452093][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:31:09][353302723452093][393 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:31:09][353302723452093][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:31:09][353302723452093][393 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:31:09][353302723452093][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302723452093\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9528\"}'\'' -e'"" [2025-08-25 13:31:09][353302723452093][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:31:09][353302723452093][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302723452093\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9528\"}'\'' -e'"" [2025-08-25 13:31:13][353302723452093][4204 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd0778df-2f22-40e6-812b-0b0bcedef580","id":"QR_fd0778df-2f22-40e6-812b-0b0bcedef580","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:31:13][353302723452093][4360 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-08-25 13:31:13][353302723452093][4360 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-08-25 13:31:13][353302723452093][4360 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:32:02][351031123017006][0 ms][INFO] === Request start === [2025-08-25 13:32:02][351031123017006][1 ms][DEBUG] START check_scloud [2025-08-25 13:32:02][351031123017006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:32:03][351031123017006][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 23725 4968 24782568 230024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:32:03][351031123017006][310 ms][DEBUG] targetPkg: running [2025-08-25 13:32:03][351031123017006][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 13:32:03][351031123017006][310 ms][DEBUG] START check_boot_completed [2025-08-25 13:32:03][351031123017006][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:32:03][351031123017006][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:32:03][351031123017006][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:32:03][351031123017006][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:32:03][351031123017006][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 13:32:03][351031123017006][404 ms][DEBUG] START check_internet [2025-08-25 13:32:03][351031123017006][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:32:03][351031123017006][685 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=179 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 179.104/179.104/179.104/0.000 ms\n [2025-08-25 13:32:03][351031123017006][685 ms][DEBUG] check_internet: online [2025-08-25 13:32:03][351031123017006][685 ms][DEBUG] END check_internet in 281 ms [2025-08-25 13:32:03][351031123017006][685 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:32:03][351031123017006][686 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031123017006\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7784\"}'\'' -e'"" [2025-08-25 13:32:03][351031123017006][686 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:32:03][351031123017006][686 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031123017006\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7784\"}'\'' -e'"" [2025-08-25 13:32:07][351031123017006][4715 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c71163b6-daab-49cf-b76d-963bc1547c20","id":"QR_c71163b6-daab-49cf-b76d-963bc1547c20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:32:07][351031123017006][4871 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 13:32:07][351031123017006][4871 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 13:32:07][351031123017006][4871 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:34:10][353881489514808][1 ms][INFO] === Request start === [2025-08-25 13:34:10][353881489514808][1 ms][DEBUG] START check_scloud [2025-08-25 13:34:10][353881489514808][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:34:10][353881489514808][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 23725 4968 24914892 239968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:34:10][353881489514808][303 ms][DEBUG] targetPkg: running [2025-08-25 13:34:10][353881489514808][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 13:34:10][353881489514808][303 ms][DEBUG] START check_boot_completed [2025-08-25 13:34:10][353881489514808][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:34:10][353881489514808][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:34:10][353881489514808][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:34:10][353881489514808][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:34:10][353881489514808][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:34:10][353881489514808][382 ms][DEBUG] START check_internet [2025-08-25 13:34:10][353881489514808][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:34:11][353881489514808][710 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=210 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 210.665/210.665/210.665/0.000 ms\n [2025-08-25 13:34:11][353881489514808][710 ms][DEBUG] check_internet: online [2025-08-25 13:34:11][353881489514808][710 ms][DEBUG] END check_internet in 328 ms [2025-08-25 13:34:11][353881489514808][710 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:34:11][353881489514808][710 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4517\"}'\'' -e'"" [2025-08-25 13:34:11][353881489514808][710 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:34:11][353881489514808][710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4517\"}'\'' -e'"" [2025-08-25 13:34:14][353881489514808][4412 ms][DEBUG] proc_open done in 3702 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 13:34:14][353881489514808][4412 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-25 13:34:14][353881489514808][4412 ms][WARN] Detected error: Process with pid 23725 either refused to load frida-agent, or terminated during injection [2025-08-25 13:34:14][353881489514808][4412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 13:34:15][353881489514808][4584 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 13:34:15][353881489514808][4584 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 13:34:15][353881489514808][4584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:34:15][353881489514808][4755 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 13:34:15][353881489514808][4756 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:34:15][353881489514808][4927 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 13:34:17][353881489514808][6942 ms][DEBUG] START check_boot_completed [2025-08-25 13:34:17][353881489514808][6943 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:34:17][353881489514808][6989 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:34:17][353881489514808][6989 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:34:17][353881489514808][7036 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:34:17][353881489514808][7036 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 13:34:20][353881489514808][10051 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 13:34:20][353881489514808][10051 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4517\"}'\'' -e'"" [2025-08-25 13:34:24][353881489514808][13941 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:34:24][353881489514808][14097 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=107 [2025-08-25 13:34:24][353881489514808][14097 ms][DEBUG] END runCmdUntilRes#2 in 4046 ms [2025-08-25 13:34:24][353881489514808][14097 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:34:24][][0 ms][INFO] === Request start === [2025-08-25 13:34:24][][1 ms][DEBUG] START check_scloud [2025-08-25 13:34:24][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:34:25][][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 25035 4968 23518012 124448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:34:25][][290 ms][DEBUG] targetPkg: running [2025-08-25 13:34:25][][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-25 13:34:25][][290 ms][DEBUG] START check_boot_completed [2025-08-25 13:34:25][][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:34:25][][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:34:25][][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:34:25][][399 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:34:25][][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:34:25][][399 ms][DEBUG] START check_internet [2025-08-25 13:34:25][][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:34:25][][727 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=125 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 125.102/125.102/125.102/0.000 ms\n [2025-08-25 13:34:25][][727 ms][DEBUG] check_internet: online [2025-08-25 13:34:25][][727 ms][DEBUG] END check_internet in 328 ms [2025-08-25 13:34:25][][727 ms][DEBUG] rawBody.length=1129 [2025-08-25 13:34:25][][727 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCTB1Q6CCA\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8064\"}'\'' -e'"" [2025-08-25 13:34:25][][727 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:34:25][][727 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCTB1Q6CCA\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8064\"}'\'' -e'"" [2025-08-25 13:34:29][][4101 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:34:29][][4257 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=107 [2025-08-25 13:34:29][][4257 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-08-25 13:34:29][][4257 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:34:31][353881489514808][0 ms][INFO] === Request start === [2025-08-25 13:34:31][353881489514808][1 ms][DEBUG] START check_scloud [2025-08-25 13:34:31][353881489514808][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:34:31][353881489514808][257 ms][DEBUG] SU: done in 256 ms; out [2025-08-25 13:34:31][353881489514808][257 ms][WARN] targetPkg: not running, restarting [2025-08-25 13:34:31][353881489514808][257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:34:31][353881489514808][382 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 13:34:31][353881489514808][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:34:31][353881489514808][522 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 13:34:33][353881489514808][2537 ms][DEBUG] END check_scloud in 2537 ms [2025-08-25 13:34:33][353881489514808][2537 ms][DEBUG] START check_boot_completed [2025-08-25 13:34:33][353881489514808][2537 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:34:33][353881489514808][2584 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:34:33][353881489514808][2584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:34:33][353881489514808][2662 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 13:34:33][353881489514808][2663 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 13:34:33][353881489514808][2663 ms][DEBUG] START check_internet [2025-08-25 13:34:33][353881489514808][2663 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:34:34][353881489514808][2975 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.666/197.666/197.666/0.000 ms\n [2025-08-25 13:34:34][353881489514808][2975 ms][DEBUG] check_internet: online [2025-08-25 13:34:34][353881489514808][2975 ms][DEBUG] END check_internet in 312 ms [2025-08-25 13:34:34][353881489514808][2975 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:34:34][353881489514808][2975 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7735\"}'\'' -e'"" [2025-08-25 13:34:34][353881489514808][2975 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:34:34][353881489514808][2975 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7735\"}'\'' -e'"" [2025-08-25 13:34:41][353881489514808][10692 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_718d3f76-1d96-4bbb-9382-70c74b190219","id":"QR_718d3f76-1d96-4bbb-9382-70c74b190219","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:34:41][353881489514808][10848 ms][DEBUG] proc_open done in 7872 ms; code=255; res.len=3343 [2025-08-25 13:34:41][353881489514808][10848 ms][DEBUG] END runCmdUntilRes#1 in 7872 ms [2025-08-25 13:34:41][353881489514808][10848 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:35:03][350013900408369][1 ms][INFO] === Request start === [2025-08-25 13:35:03][350013900408369][1 ms][DEBUG] START check_scloud [2025-08-25 13:35:03][350013900408369][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:35:03][350013900408369][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 25376 4968 23580848 127476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:35:03][350013900408369][285 ms][DEBUG] targetPkg: running [2025-08-25 13:35:03][350013900408369][285 ms][DEBUG] END check_scloud in 284 ms [2025-08-25 13:35:03][350013900408369][285 ms][DEBUG] START check_boot_completed [2025-08-25 13:35:03][350013900408369][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:35:03][350013900408369][332 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:35:03][350013900408369][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:35:03][350013900408369][394 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:35:03][350013900408369][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:35:03][350013900408369][395 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:35:03][350013900408369][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013900408369\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2535\"}'\'' -e'"" [2025-08-25 13:35:03][350013900408369][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:35:03][350013900408369][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013900408369\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2535\"}'\'' -e'"" [2025-08-25 13:35:07][350013900408369][4331 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_197f7955-098f-42d8-bbf7-a2aaa1abad63","id":"QR_197f7955-098f-42d8-bbf7-a2aaa1abad63","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:35:07][350013900408369][4487 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-25 13:35:07][350013900408369][4487 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-25 13:35:07][350013900408369][4487 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:35:10][352192669451998][0 ms][INFO] === Request start === [2025-08-25 13:35:10][352192669451998][1 ms][DEBUG] START check_scloud [2025-08-25 13:35:10][352192669451998][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:35:10][352192669451998][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 25376 4968 23707000 139244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:35:10][352192669451998][308 ms][DEBUG] targetPkg: running [2025-08-25 13:35:10][352192669451998][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 13:35:10][352192669451998][309 ms][DEBUG] START check_boot_completed [2025-08-25 13:35:10][352192669451998][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:35:10][352192669451998][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:35:10][352192669451998][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:35:10][352192669451998][449 ms][DEBUG] SU: done in 93 ms; out [2025-08-25 13:35:10][352192669451998][449 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 13:35:10][352192669451998][449 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:35:10][352192669451998][449 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669451998\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7495\"}'\'' -e'"" [2025-08-25 13:35:10][352192669451998][449 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:35:10][352192669451998][449 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669451998\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7495\"}'\'' -e'"" [2025-08-25 13:35:15][352192669451998][5010 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97cca441-2b04-408c-b689-214a45e852f2","id":"QR_97cca441-2b04-408c-b689-214a45e852f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:35:15][352192669451998][5166 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-08-25 13:35:15][352192669451998][5166 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-08-25 13:35:15][352192669451998][5166 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:37:02][354601552229566][1 ms][INFO] === Request start === [2025-08-25 13:37:02][354601552229566][1 ms][DEBUG] START check_scloud [2025-08-25 13:37:02][354601552229566][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:37:03][354601552229566][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 25376 4968 23847240 151248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:37:03][354601552229566][278 ms][DEBUG] targetPkg: running [2025-08-25 13:37:03][354601552229566][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-25 13:37:03][354601552229566][278 ms][DEBUG] START check_boot_completed [2025-08-25 13:37:03][354601552229566][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:37:03][354601552229566][309 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:37:03][354601552229566][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:37:03][354601552229566][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:37:03][354601552229566][356 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 13:37:03][354601552229566][357 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:37:03][354601552229566][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601552229566\",\"model\":\"SM-S906B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1587\"}'\'' -e'"" [2025-08-25 13:37:03][354601552229566][357 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:37:03][354601552229566][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354601552229566\",\"model\":\"SM-S906B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1587\"}'\'' -e'"" [2025-08-25 13:37:07][354601552229566][4293 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_96ebbb79-5682-4903-96d1-c0299e509fee","id":"QR_96ebbb79-5682-4903-96d1-c0299e509fee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:37:07][354601552229566][4449 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-25 13:37:07][354601552229566][4449 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-25 13:37:07][354601552229566][4449 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:37:08][355416333554292][0 ms][INFO] === Request start === [2025-08-25 13:37:08][355416333554292][1 ms][DEBUG] START check_scloud [2025-08-25 13:37:08][355416333554292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:37:08][355416333554292][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 25376 4968 24009296 162224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:37:08][355416333554292][260 ms][DEBUG] targetPkg: running [2025-08-25 13:37:08][355416333554292][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 13:37:08][355416333554292][260 ms][DEBUG] START check_boot_completed [2025-08-25 13:37:08][355416333554292][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:37:09][355416333554292][306 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:37:09][355416333554292][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:37:09][355416333554292][369 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:37:09][355416333554292][369 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:37:09][355416333554292][369 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:37:09][355416333554292][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416333554292\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4825\"}'\'' -e'"" [2025-08-25 13:37:09][355416333554292][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:37:09][355416333554292][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416333554292\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4825\"}'\'' -e'"" [2025-08-25 13:37:12][355416333554292][4134 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98fdddf6-0b20-499e-80b4-3ac3e2f08f10","id":"QR_98fdddf6-0b20-499e-80b4-3ac3e2f08f10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:37:13][355416333554292][4290 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-25 13:37:13][355416333554292][4290 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-25 13:37:13][355416333554292][4290 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:37:14][355001767347437][0 ms][INFO] === Request start === [2025-08-25 13:37:14][355001767347437][1 ms][DEBUG] START check_scloud [2025-08-25 13:37:14][355001767347437][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:37:14][355001767347437][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 25376 4968 24176280 174044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:37:14][355001767347437][318 ms][DEBUG] targetPkg: running [2025-08-25 13:37:14][355001767347437][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 13:37:14][355001767347437][319 ms][DEBUG] START check_boot_completed [2025-08-25 13:37:14][355001767347437][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:37:14][355001767347437][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:37:14][355001767347437][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:37:14][355001767347437][428 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 13:37:14][355001767347437][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:37:14][355001767347437][428 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:37:14][355001767347437][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001767347437\",\"model\":\"SM-F711B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7462\"}'\'' -e'"" [2025-08-25 13:37:14][355001767347437][428 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:37:14][355001767347437][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001767347437\",\"model\":\"SM-F711B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7462\"}'\'' -e'"" [2025-08-25 13:37:18][355001767347437][4270 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a776d4b-7497-4827-93cd-aa785293adc0","id":"QR_1a776d4b-7497-4827-93cd-aa785293adc0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:37:18][355001767347437][4427 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-25 13:37:18][355001767347437][4427 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-25 13:37:18][355001767347437][4427 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:37:20][351393987293101][0 ms][INFO] === Request start === [2025-08-25 13:37:20][351393987293101][1 ms][DEBUG] START check_scloud [2025-08-25 13:37:20][351393987293101][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:37:20][351393987293101][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 25376 4968 24328992 184904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:37:20][351393987293101][251 ms][DEBUG] targetPkg: running [2025-08-25 13:37:20][351393987293101][251 ms][DEBUG] END check_scloud in 251 ms [2025-08-25 13:37:20][351393987293101][251 ms][DEBUG] START check_boot_completed [2025-08-25 13:37:20][351393987293101][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:37:20][351393987293101][282 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:37:20][351393987293101][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:37:20][351393987293101][329 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:37:20][351393987293101][330 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:37:20][351393987293101][330 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:37:20][351393987293101][330 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351393987293101\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6300\"}'\'' -e'"" [2025-08-25 13:37:20][351393987293101][330 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:37:20][351393987293101][330 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351393987293101\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6300\"}'\'' -e'"" [2025-08-25 13:37:24][351393987293101][4203 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 13:37:24][351393987293101][4360 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=115 [2025-08-25 13:37:24][351393987293101][4360 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-25 13:37:24][351393987293101][4360 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 13:37:24][][0 ms][INFO] === Request start === [2025-08-25 13:37:24][][1 ms][DEBUG] START check_scloud [2025-08-25 13:37:24][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:37:25][][259 ms][DEBUG] SU: done in 259 ms; outu0_a118 25376 4968 24448516 196828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:37:25][][259 ms][DEBUG] targetPkg: running [2025-08-25 13:37:25][][259 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 13:37:25][][260 ms][DEBUG] START check_boot_completed [2025-08-25 13:37:25][][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:37:25][][306 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:37:25][][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:37:25][][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:37:25][][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:37:25][][353 ms][DEBUG] rawBody.length=1129 [2025-08-25 13:37:25][][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CTB055HCJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3347\"}'\'' -e'"" [2025-08-25 13:37:25][][353 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:37:25][][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CTB055HCJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3347\"}'\'' -e'"" [2025-08-25 13:37:28][][4024 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:37:29][][4180 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=107 [2025-08-25 13:37:29][][4180 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-25 13:37:29][][4180 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:37:32][355680657293890][0 ms][INFO] === Request start === [2025-08-25 13:37:32][355680657293890][0 ms][DEBUG] START check_scloud [2025-08-25 13:37:32][355680657293890][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:37:32][355680657293890][244 ms][DEBUG] SU: done in 244 ms; outu0_a118 25376 4968 24574696 207404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:37:32][355680657293890][244 ms][DEBUG] targetPkg: running [2025-08-25 13:37:32][355680657293890][244 ms][DEBUG] END check_scloud in 244 ms [2025-08-25 13:37:32][355680657293890][244 ms][DEBUG] START check_boot_completed [2025-08-25 13:37:32][355680657293890][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:37:32][355680657293890][275 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:37:32][355680657293890][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:37:32][355680657293890][322 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:37:32][355680657293890][322 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:37:32][355680657293890][322 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:37:32][355680657293890][322 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680657293890\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9031\"}'\'' -e'"" [2025-08-25 13:37:32][355680657293890][322 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:37:32][355680657293890][322 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680657293890\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9031\"}'\'' -e'"" [2025-08-25 13:37:36][355680657293890][3837 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 13:37:36][355680657293890][3994 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=115 [2025-08-25 13:37:36][355680657293890][3994 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-25 13:37:36][355680657293890][3994 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 13:37:36][][0 ms][INFO] === Request start === [2025-08-25 13:37:36][][1 ms][DEBUG] START check_scloud [2025-08-25 13:37:36][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:37:37][][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 25376 4968 24700748 218172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:37:37][][317 ms][DEBUG] targetPkg: running [2025-08-25 13:37:37][][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 13:37:37][][317 ms][DEBUG] START check_boot_completed [2025-08-25 13:37:37][][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:37:37][][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:37:37][][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:37:37][][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:37:37][][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:37:37][][426 ms][DEBUG] rawBody.length=1129 [2025-08-25 13:37:37][][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CX30MGM7V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4228\"}'\'' -e'"" [2025-08-25 13:37:37][][426 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:37:37][][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CX30MGM7V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4228\"}'\'' -e'"" [2025-08-25 13:37:41][][4097 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:37:41][][4253 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=107 [2025-08-25 13:37:41][][4253 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-25 13:37:41][][4253 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:37:43][355680657293890][0 ms][INFO] === Request start === [2025-08-25 13:37:43][355680657293890][1 ms][DEBUG] START check_scloud [2025-08-25 13:37:43][355680657293890][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:37:43][355680657293890][263 ms][DEBUG] SU: done in 263 ms; outu0_a118 25376 4968 24857648 229112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:37:43][355680657293890][263 ms][DEBUG] targetPkg: running [2025-08-25 13:37:43][355680657293890][263 ms][DEBUG] END check_scloud in 263 ms [2025-08-25 13:37:43][355680657293890][263 ms][DEBUG] START check_boot_completed [2025-08-25 13:37:43][355680657293890][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:37:43][355680657293890][295 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:37:43][355680657293890][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:37:43][355680657293890][341 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:37:43][355680657293890][341 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:37:43][355680657293890][341 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:37:43][355680657293890][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680657293890\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3639\"}'\'' -e'"" [2025-08-25 13:37:43][355680657293890][342 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:37:43][355680657293890][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680657293890\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3639\"}'\'' -e'"" [2025-08-25 13:37:48][355680657293890][5043 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:37:48][355680657293890][5200 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=107 [2025-08-25 13:37:48][355680657293890][5200 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-08-25 13:37:48][355680657293890][5200 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:37:48][][0 ms][INFO] === Request start === [2025-08-25 13:37:48][][1 ms][DEBUG] START check_scloud [2025-08-25 13:37:48][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:37:48][][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 25376 4968 24987800 240876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:37:48][][295 ms][DEBUG] targetPkg: running [2025-08-25 13:37:48][][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-25 13:37:48][][295 ms][DEBUG] START check_boot_completed [2025-08-25 13:37:48][][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:37:48][][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:37:48][][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:37:49][][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:37:49][][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:37:49][][373 ms][DEBUG] rawBody.length=1130 [2025-08-25 13:37:49][][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CX30MGM7V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2975\"}'\'' -e'"" [2025-08-25 13:37:49][][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:37:49][][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CX30MGM7V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2975\"}'\'' -e'"" [2025-08-25 13:37:52][][4201 ms][DEBUG] proc_open done in 3827 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 13:37:52][][4201 ms][DEBUG] END runCmdUntilRes#1 in 3828 ms [2025-08-25 13:37:52][][4201 ms][WARN] Detected error: Process with pid 25376 either refused to load frida-agent, or terminated during injection [2025-08-25 13:37:52][][4201 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 13:37:52][][4325 ms][DEBUG] SU: done in 124 ms; out [2025-08-25 13:37:52][][4325 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 13:37:52][][4325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:37:53][][4435 ms][DEBUG] SU: done in 109 ms; out [2025-08-25 13:37:53][][4435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:37:53][][4607 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 13:37:55][][6622 ms][DEBUG] START check_boot_completed [2025-08-25 13:37:55][][6622 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:37:55][][6653 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:37:55][][6653 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:37:55][][6700 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:37:55][][6700 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:37:58][][9715 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 13:37:58][][9715 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CX30MGM7V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2975\"}'\'' -e'"" [2025-08-25 13:38:02][][13667 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:38:02][][13823 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=107 [2025-08-25 13:38:02][][13823 ms][DEBUG] END runCmdUntilRes#2 in 4109 ms [2025-08-25 13:38:02][][13824 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:38:05][355680657293890][0 ms][INFO] === Request start === [2025-08-25 13:38:05][355680657293890][0 ms][DEBUG] START check_scloud [2025-08-25 13:38:05][355680657293890][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:38:05][355680657293890][230 ms][DEBUG] SU: done in 230 ms; outu0_a118 27276 4968 23552892 123852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:38:05][355680657293890][230 ms][DEBUG] targetPkg: running [2025-08-25 13:38:05][355680657293890][230 ms][DEBUG] END check_scloud in 230 ms [2025-08-25 13:38:05][355680657293890][230 ms][DEBUG] START check_boot_completed [2025-08-25 13:38:05][355680657293890][230 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:38:05][355680657293890][262 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:38:05][355680657293890][262 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:38:05][355680657293890][308 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:38:05][355680657293890][308 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:38:05][355680657293890][308 ms][DEBUG] START check_internet [2025-08-25 13:38:05][355680657293890][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:38:05][355680657293890][746 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=345 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 345.376/345.376/345.376/0.000 ms\n [2025-08-25 13:38:05][355680657293890][746 ms][DEBUG] check_internet: online [2025-08-25 13:38:05][355680657293890][746 ms][DEBUG] END check_internet in 437 ms [2025-08-25 13:38:05][355680657293890][746 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:38:05][355680657293890][746 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680657293890\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8443\"}'\'' -e'"" [2025-08-25 13:38:05][355680657293890][746 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:38:05][355680657293890][746 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680657293890\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8443\"}'\'' -e'"" [2025-08-25 13:38:09][355680657293890][4479 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 13:38:09][355680657293890][4636 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=115 [2025-08-25 13:38:09][355680657293890][4636 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-25 13:38:09][355680657293890][4636 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 13:38:10][][0 ms][INFO] === Request start === [2025-08-25 13:38:10][][1 ms][DEBUG] START check_scloud [2025-08-25 13:38:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:38:10][][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 27276 4968 23739348 136924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:38:10][][298 ms][DEBUG] targetPkg: running [2025-08-25 13:38:10][][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 13:38:10][][298 ms][DEBUG] START check_boot_completed [2025-08-25 13:38:10][][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:38:10][][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:38:10][][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:38:10][][408 ms][DEBUG] SU: done in 64 ms; out [2025-08-25 13:38:10][][408 ms][DEBUG] END check_boot_completed in 111 ms [2025-08-25 13:38:10][][408 ms][DEBUG] START check_internet [2025-08-25 13:38:10][][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:38:10][][688 ms][DEBUG] SU: done in 279 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.079/149.079/149.079/0.000 ms\n [2025-08-25 13:38:10][][688 ms][DEBUG] check_internet: online [2025-08-25 13:38:10][][688 ms][DEBUG] END check_internet in 280 ms [2025-08-25 13:38:10][][688 ms][DEBUG] rawBody.length=1129 [2025-08-25 13:38:10][][688 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CX30MGM7V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9940\"}'\'' -e'"" [2025-08-25 13:38:10][][688 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:38:10][][688 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CX30MGM7V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9940\"}'\'' -e'"" [2025-08-25 13:38:14][][4125 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:38:14][][4281 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=107 [2025-08-25 13:38:14][][4281 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-08-25 13:38:14][][4281 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:38:16][355680657293890][0 ms][INFO] === Request start === [2025-08-25 13:38:16][355680657293890][1 ms][DEBUG] START check_scloud [2025-08-25 13:38:16][355680657293890][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:38:16][355680657293890][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 27276 4968 23921784 148780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:38:16][355680657293890][292 ms][DEBUG] targetPkg: running [2025-08-25 13:38:16][355680657293890][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-25 13:38:16][355680657293890][292 ms][DEBUG] START check_boot_completed [2025-08-25 13:38:16][355680657293890][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:38:16][355680657293890][338 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:38:16][355680657293890][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:38:16][355680657293890][401 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:38:16][355680657293890][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:38:16][355680657293890][401 ms][DEBUG] START check_internet [2025-08-25 13:38:16][355680657293890][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:38:16][355680657293890][791 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.536/259.536/259.536/0.000 ms\n [2025-08-25 13:38:16][355680657293890][791 ms][DEBUG] check_internet: online [2025-08-25 13:38:16][355680657293890][791 ms][DEBUG] END check_internet in 391 ms [2025-08-25 13:38:16][355680657293890][792 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:38:16][355680657293890][792 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680657293890\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9934\"}'\'' -e'"" [2025-08-25 13:38:16][355680657293890][792 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:38:16][355680657293890][792 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680657293890\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9934\"}'\'' -e'"" [2025-08-25 13:38:21][355680657293890][4962 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:38:21][355680657293890][5118 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=107 [2025-08-25 13:38:21][355680657293890][5118 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-25 13:38:21][355680657293890][5118 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:38:21][][0 ms][INFO] === Request start === [2025-08-25 13:38:21][][0 ms][DEBUG] START check_scloud [2025-08-25 13:38:21][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:38:21][][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 27276 4968 24071572 159880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:38:21][][275 ms][DEBUG] targetPkg: running [2025-08-25 13:38:21][][275 ms][DEBUG] END check_scloud in 274 ms [2025-08-25 13:38:21][][275 ms][DEBUG] START check_boot_completed [2025-08-25 13:38:21][][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:38:21][][306 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:38:21][][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:38:21][][368 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:38:21][][368 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 13:38:21][][368 ms][DEBUG] START check_internet [2025-08-25 13:38:21][][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:38:22][][681 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=154 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 154.503/154.503/154.503/0.000 ms\n [2025-08-25 13:38:22][][681 ms][DEBUG] check_internet: online [2025-08-25 13:38:22][][681 ms][DEBUG] END check_internet in 313 ms [2025-08-25 13:38:22][][681 ms][DEBUG] rawBody.length=1130 [2025-08-25 13:38:22][][681 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CX30MGM7V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3872\"}'\'' -e'"" [2025-08-25 13:38:22][][681 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:38:22][][681 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CX30MGM7V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3872\"}'\'' -e'"" [2025-08-25 13:38:30][][8679 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:38:30][][8835 ms][DEBUG] proc_open done in 8154 ms; code=255; res.len=107 [2025-08-25 13:38:30][][8835 ms][DEBUG] END runCmdUntilRes#1 in 8154 ms [2025-08-25 13:38:30][][8835 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:38:31][353548758555891][0 ms][INFO] === Request start === [2025-08-25 13:38:31][353548758555891][0 ms][DEBUG] START check_scloud [2025-08-25 13:38:31][353548758555891][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:38:31][353548758555891][279 ms][DEBUG] SU: done in 279 ms; outu0_a118 27276 4968 24103204 172040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:38:31][353548758555891][279 ms][DEBUG] targetPkg: running [2025-08-25 13:38:31][353548758555891][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-25 13:38:31][353548758555891][280 ms][DEBUG] START check_boot_completed [2025-08-25 13:38:31][353548758555891][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:38:31][353548758555891][326 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:38:31][353548758555891][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:38:31][353548758555891][388 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:38:31][353548758555891][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:38:31][353548758555891][388 ms][DEBUG] START check_internet [2025-08-25 13:38:31][353548758555891][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:38:32][353548758555891][686 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.191/192.191/192.191/0.000 ms\n [2025-08-25 13:38:32][353548758555891][686 ms][DEBUG] check_internet: online [2025-08-25 13:38:32][353548758555891][686 ms][DEBUG] END check_internet in 297 ms [2025-08-25 13:38:32][353548758555891][686 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:38:32][353548758555891][686 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548758555891\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9825\"}'\'' -e'"" [2025-08-25 13:38:32][353548758555891][686 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:38:32][353548758555891][686 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548758555891\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9825\"}'\'' -e'"" [2025-08-25 13:38:35][353548758555891][4231 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:38:35][353548758555891][4388 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=107 [2025-08-25 13:38:35][353548758555891][4388 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-25 13:38:35][353548758555891][4388 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:38:36][][0 ms][INFO] === Request start === [2025-08-25 13:38:36][][1 ms][DEBUG] START check_scloud [2025-08-25 13:38:36][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:38:36][][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 27276 4968 24241708 182896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:38:36][][259 ms][DEBUG] targetPkg: running [2025-08-25 13:38:36][][259 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 13:38:36][][259 ms][DEBUG] START check_boot_completed [2025-08-25 13:38:36][][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:38:36][][306 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:38:36][][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:38:36][][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:38:36][][353 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 13:38:36][][353 ms][DEBUG] START check_internet [2025-08-25 13:38:36][][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:38:36][][634 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=155 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 155.502/155.502/155.502/0.000 ms\n [2025-08-25 13:38:36][][634 ms][DEBUG] check_internet: online [2025-08-25 13:38:36][][634 ms][DEBUG] END check_internet in 281 ms [2025-08-25 13:38:36][][634 ms][DEBUG] rawBody.length=1129 [2025-08-25 13:38:36][][635 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB0Y8GCF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2350\"}'\'' -e'"" [2025-08-25 13:38:36][][635 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:38:36][][635 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB0Y8GCF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2350\"}'\'' -e'"" [2025-08-25 13:38:40][][4149 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:38:40][][4305 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=107 [2025-08-25 13:38:40][][4305 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-08-25 13:38:40][][4305 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:39:03][351371810271627][1 ms][INFO] === Request start === [2025-08-25 13:39:03][351371810271627][1 ms][DEBUG] START check_scloud [2025-08-25 13:39:03][351371810271627][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:39:04][351371810271627][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 27276 4968 24322660 194716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:39:04][351371810271627][309 ms][DEBUG] targetPkg: running [2025-08-25 13:39:04][351371810271627][310 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 13:39:04][351371810271627][310 ms][DEBUG] START check_boot_completed [2025-08-25 13:39:04][351371810271627][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:39:04][351371810271627][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:39:04][351371810271627][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:39:04][351371810271627][404 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 13:39:04][351371810271627][404 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 13:39:04][351371810271627][404 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:39:04][351371810271627][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351371810271627\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3262\"}'\'' -e'"" [2025-08-25 13:39:04][351371810271627][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:39:04][351371810271627][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351371810271627\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3262\"}'\'' -e'"" [2025-08-25 13:39:10][351371810271627][6776 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9fc1870b-5652-4d51-bafe-2c5f0102dc27","id":"QR_9fc1870b-5652-4d51-bafe-2c5f0102dc27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:39:10][351371810271627][6933 ms][DEBUG] proc_open done in 6528 ms; code=255; res.len=3343 [2025-08-25 13:39:10][351371810271627][6933 ms][DEBUG] END runCmdUntilRes#1 in 6528 ms [2025-08-25 13:39:10][351371810271627][6933 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:41:03][352590520917604][0 ms][INFO] === Request start === [2025-08-25 13:41:03][352590520917604][1 ms][DEBUG] START check_scloud [2025-08-25 13:41:03][352590520917604][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:41:03][352590520917604][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 27276 4968 24438424 205720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:41:03][352590520917604][297 ms][DEBUG] targetPkg: running [2025-08-25 13:41:03][352590520917604][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 13:41:03][352590520917604][297 ms][DEBUG] START check_boot_completed [2025-08-25 13:41:03][352590520917604][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:41:03][352590520917604][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:41:03][352590520917604][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:41:03][352590520917604][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:41:03][352590520917604][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:41:03][352590520917604][406 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:41:03][352590520917604][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590520917604\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3375\"}'\'' -e'"" [2025-08-25 13:41:03][352590520917604][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:41:03][352590520917604][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590520917604\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3375\"}'\'' -e'"" [2025-08-25 13:41:08][352590520917604][4717 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9332864-d6d8-41dc-b572-582f894b497f","id":"QR_a9332864-d6d8-41dc-b572-582f894b497f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:41:08][352590520917604][4874 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-25 13:41:08][352590520917604][4874 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-25 13:41:08][352590520917604][4874 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:41:10][355326625636154][1 ms][INFO] === Request start === [2025-08-25 13:41:10][355326625636154][1 ms][DEBUG] START check_scloud [2025-08-25 13:41:10][355326625636154][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:41:11][355326625636154][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 27276 4968 24585120 216748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:41:11][355326625636154][297 ms][DEBUG] targetPkg: running [2025-08-25 13:41:11][355326625636154][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 13:41:11][355326625636154][297 ms][DEBUG] START check_boot_completed [2025-08-25 13:41:11][355326625636154][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:41:11][355326625636154][343 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:41:11][355326625636154][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:41:11][355326625636154][421 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 13:41:11][355326625636154][421 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 13:41:11][355326625636154][421 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:41:11][355326625636154][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326625636154\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1007\"}'\'' -e'"" [2025-08-25 13:41:11][355326625636154][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:41:11][355326625636154][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326625636154\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1007\"}'\'' -e'"" [2025-08-25 13:41:14][355326625636154][4139 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6776a9a8-7102-4512-8998-2f5ac88538d7","id":"QR_6776a9a8-7102-4512-8998-2f5ac88538d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:41:15][355326625636154][4295 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-25 13:41:15][355326625636154][4295 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-25 13:41:15][355326625636154][4296 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:42:04][353818878270295][0 ms][INFO] === Request start === [2025-08-25 13:42:04][353818878270295][1 ms][DEBUG] START check_scloud [2025-08-25 13:42:04][353818878270295][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:42:04][353818878270295][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 27276 4968 24674272 228732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:42:04][353818878270295][269 ms][DEBUG] targetPkg: running [2025-08-25 13:42:04][353818878270295][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-25 13:42:04][353818878270295][269 ms][DEBUG] START check_boot_completed [2025-08-25 13:42:04][353818878270295][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:42:04][353818878270295][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:42:04][353818878270295][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:42:04][353818878270295][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:42:04][353818878270295][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:42:04][353818878270295][362 ms][DEBUG] START check_internet [2025-08-25 13:42:04][353818878270295][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:42:05][353818878270295][847 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.818/200.818/200.818/0.000 ms\n [2025-08-25 13:42:05][353818878270295][847 ms][DEBUG] check_internet: online [2025-08-25 13:42:05][353818878270295][847 ms][DEBUG] END check_internet in 484 ms [2025-08-25 13:42:05][353818878270295][847 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:42:05][353818878270295][847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818878270295\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1393\"}'\'' -e'"" [2025-08-25 13:42:05][353818878270295][847 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:42:05][353818878270295][847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818878270295\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1393\"}'\'' -e'"" [2025-08-25 13:42:09][353818878270295][5127 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67d3a4d2-195e-4c22-9e8d-3270e58090a4","id":"QR_67d3a4d2-195e-4c22-9e8d-3270e58090a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:42:09][353818878270295][5283 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-25 13:42:09][353818878270295][5283 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-25 13:42:09][353818878270295][5283 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:43:05][351816151633934][0 ms][INFO] === Request start === [2025-08-25 13:43:05][351816151633934][1 ms][DEBUG] START check_scloud [2025-08-25 13:43:05][351816151633934][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:43:05][351816151633934][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 27276 4968 24802372 240608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:43:05][351816151633934][266 ms][DEBUG] targetPkg: running [2025-08-25 13:43:05][351816151633934][266 ms][DEBUG] END check_scloud in 266 ms [2025-08-25 13:43:05][351816151633934][266 ms][DEBUG] START check_boot_completed [2025-08-25 13:43:05][351816151633934][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:43:05][351816151633934][297 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:43:05][351816151633934][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:43:05][351816151633934][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:43:05][351816151633934][345 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:43:05][351816151633934][345 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:43:05][351816151633934][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351816151633934\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3365\"}'\'' -e'"" [2025-08-25 13:43:05][351816151633934][345 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:43:05][351816151633934][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351816151633934\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3365\"}'\'' -e'"" [2025-08-25 13:43:13][351816151633934][8171 ms][DEBUG] proc_open done in 7826 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 13:43:13][351816151633934][8171 ms][DEBUG] END runCmdUntilRes#1 in 7826 ms [2025-08-25 13:43:13][351816151633934][8171 ms][WARN] Detected error: Process with pid 27276 either refused to load frida-agent, or terminated during injection [2025-08-25 13:43:13][351816151633934][8171 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 13:43:13][351816151633934][8343 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 13:43:13][351816151633934][8343 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 13:43:13][351816151633934][8343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:43:13][351816151633934][8546 ms][DEBUG] SU: done in 203 ms; out [2025-08-25 13:43:13][351816151633934][8546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:43:13][351816151633934][8781 ms][DEBUG] SU: done in 235 ms; out [2025-08-25 13:43:15][351816151633934][10795 ms][DEBUG] START check_boot_completed [2025-08-25 13:43:15][351816151633934][10795 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:43:15][351816151633934][10842 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:43:15][351816151633934][10842 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:43:15][351816151633934][10905 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 13:43:15][351816151633934][10905 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 13:43:18][351816151633934][13919 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 13:43:18][351816151633934][13919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351816151633934\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3365\"}'\'' -e'"" [2025-08-25 13:43:20][351816151633934][15903 ms][DEBUG] proc_open done in 1984 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-25 13:43:20][351816151633934][15903 ms][DEBUG] END runCmdUntilRes#2 in 1984 ms [2025-08-25 13:43:20][351816151633934][15904 ms][WARN] Detected error 2; Reboot the device [2025-08-25 13:43:20][351816151633934][15904 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 13:43:21][351816151633934][16528 ms][DEBUG] SU: done in 624 ms; out [2025-08-25 13:44:05][351816151633934][1 ms][INFO] === Request start === [2025-08-25 13:44:05][351816151633934][1 ms][DEBUG] START check_scloud [2025-08-25 13:44:05][351816151633934][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:44:05][351816151633934][30 ms][DEBUG] SU: done in 29 ms; out [2025-08-25 13:44:05][351816151633934][30 ms][WARN] targetPkg: not running, restarting [2025-08-25 13:44:05][351816151633934][30 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:44:05][351816151633934][62 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 13:44:05][351816151633934][62 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:44:05][351816151633934][93 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 13:44:07][351816151633934][2108 ms][DEBUG] END check_scloud in 2107 ms [2025-08-25 13:44:07][351816151633934][2108 ms][DEBUG] START check_boot_completed [2025-08-25 13:44:07][351816151633934][2108 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:44:21][351816151633934][16363 ms][DEBUG] ADB: done in 14255 ms; out [2025-08-25 13:44:21][351816151633934][16363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:44:21][351816151633934][16441 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 13:44:21][351816151633934][16442 ms][DEBUG] END check_boot_completed in 14333 ms [2025-08-25 13:44:21][351816151633934][16442 ms][DEBUG] START check_internet [2025-08-25 13:44:21][351816151633934][16442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:44:21][351816151633934][16691 ms][DEBUG] SU: done in 250 ms; out [2025-08-25 13:44:21][351816151633934][16691 ms][WARN] check_internet: offline [2025-08-25 13:44:21][351816151633934][16691 ms][DEBUG] END check_internet in 250 ms [2025-08-25 13:44:25][352384571655374][0 ms][INFO] === Request start === [2025-08-25 13:44:25][352384571655374][1 ms][DEBUG] START check_scloud [2025-08-25 13:44:25][352384571655374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:44:25][352384571655374][39 ms][DEBUG] SU: done in 38 ms; out [2025-08-25 13:44:25][352384571655374][39 ms][WARN] targetPkg: not running, restarting [2025-08-25 13:44:25][352384571655374][39 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:44:25][352384571655374][70 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 13:44:25][352384571655374][70 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:44:25][352384571655374][101 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 13:44:27][352384571655374][2109 ms][DEBUG] END check_scloud in 2108 ms [2025-08-25 13:44:27][352384571655374][2109 ms][DEBUG] START check_boot_completed [2025-08-25 13:44:27][352384571655374][2109 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:44:27][352384571655374][2156 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:44:27][352384571655374][2156 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:44:27][352384571655374][2218 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:44:27][352384571655374][2218 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:44:27][352384571655374][2218 ms][DEBUG] START check_internet [2025-08-25 13:44:27][352384571655374][2218 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:44:28][352384571655374][2328 ms][DEBUG] SU: done in 109 ms; out [2025-08-25 13:44:28][352384571655374][2328 ms][WARN] check_internet: offline [2025-08-25 13:44:28][352384571655374][2328 ms][DEBUG] END check_internet in 109 ms [2025-08-25 13:44:31][354916442169255][0 ms][INFO] === Request start === [2025-08-25 13:44:31][354916442169255][1 ms][DEBUG] START check_scloud [2025-08-25 13:44:31][354916442169255][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:44:32][354916442169255][715 ms][DEBUG] SU: done in 714 ms; out [2025-08-25 13:44:32][354916442169255][715 ms][WARN] targetPkg: not running, restarting [2025-08-25 13:44:32][354916442169255][715 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:44:32][354916442169255][856 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 13:44:32][354916442169255][856 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:44:33][354916442169255][1466 ms][DEBUG] SU: done in 610 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 13:44:35][354916442169255][3480 ms][DEBUG] END check_scloud in 3479 ms [2025-08-25 13:44:35][354916442169255][3480 ms][DEBUG] START check_boot_completed [2025-08-25 13:44:35][354916442169255][3480 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:44:35][354916442169255][3511 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:44:35][354916442169255][3511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:44:35][354916442169255][3621 ms][DEBUG] SU: done in 109 ms; out [2025-08-25 13:44:35][354916442169255][3621 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 13:44:35][354916442169255][3621 ms][DEBUG] START check_internet [2025-08-25 13:44:35][354916442169255][3621 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:44:36][354916442169255][4652 ms][DEBUG] SU: done in 1031 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.981/200.981/200.981/0.000 ms\n [2025-08-25 13:44:36][354916442169255][4652 ms][DEBUG] check_internet: online [2025-08-25 13:44:36][354916442169255][4652 ms][DEBUG] END check_internet in 1031 ms [2025-08-25 13:44:36][354916442169255][4652 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:44:36][354916442169255][4652 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442169255\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2774\"}'\'' -e'"" [2025-08-25 13:44:36][354916442169255][4652 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:44:36][354916442169255][4652 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442169255\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2774\"}'\'' -e'"" [2025-08-25 13:44:43][354916442169255][11681 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_062a7716-7f30-46ea-ae06-636ef3853fa8","id":"QR_062a7716-7f30-46ea-ae06-636ef3853fa8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:44:43][354916442169255][11837 ms][DEBUG] proc_open done in 7185 ms; code=255; res.len=3343 [2025-08-25 13:44:43][354916442169255][11837 ms][DEBUG] END runCmdUntilRes#1 in 7185 ms [2025-08-25 13:44:43][354916442169255][11838 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:45:05][351816151633934][0 ms][INFO] === Request start === [2025-08-25 13:45:05][351816151633934][1 ms][DEBUG] START check_scloud [2025-08-25 13:45:05][351816151633934][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:45:05][351816151633934][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 8249 4968 23794816 74608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:45:05][351816151633934][320 ms][DEBUG] targetPkg: running [2025-08-25 13:45:05][351816151633934][320 ms][DEBUG] END check_scloud in 320 ms [2025-08-25 13:45:05][351816151633934][320 ms][DEBUG] START check_boot_completed [2025-08-25 13:45:05][351816151633934][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:45:05][351816151633934][367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:45:05][351816151633934][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:45:05][351816151633934][430 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 13:45:05][351816151633934][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:45:05][351816151633934][430 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:45:05][351816151633934][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351816151633934\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2992\"}'\'' -e'"" [2025-08-25 13:45:05][351816151633934][430 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:45:05][351816151633934][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351816151633934\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2992\"}'\'' -e'"" [2025-08-25 13:45:11][351816151633934][6350 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1c12997-508f-4e75-b066-a811aa6ed981","id":"QR_f1c12997-508f-4e75-b066-a811aa6ed981","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:45:11][351816151633934][6506 ms][DEBUG] proc_open done in 6076 ms; code=255; res.len=3343 [2025-08-25 13:45:11][351816151633934][6506 ms][DEBUG] END runCmdUntilRes#1 in 6076 ms [2025-08-25 13:45:11][351816151633934][6506 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:45:16][352384571655374][0 ms][INFO] === Request start === [2025-08-25 13:45:16][352384571655374][1 ms][DEBUG] START check_scloud [2025-08-25 13:45:16][352384571655374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:45:17][352384571655374][469 ms][DEBUG] SU: done in 469 ms; outu0_a118 8249 4968 23904172 82532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:45:17][352384571655374][470 ms][DEBUG] targetPkg: running [2025-08-25 13:45:17][352384571655374][470 ms][DEBUG] END check_scloud in 469 ms [2025-08-25 13:45:17][352384571655374][470 ms][DEBUG] START check_boot_completed [2025-08-25 13:45:17][352384571655374][470 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:45:17][352384571655374][516 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:45:17][352384571655374][516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:45:17][352384571655374][689 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 13:45:17][352384571655374][689 ms][DEBUG] END check_boot_completed in 219 ms [2025-08-25 13:45:17][352384571655374][689 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:45:17][352384571655374][689 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384571655374\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2354\"}'\'' -e'"" [2025-08-25 13:45:17][352384571655374][689 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:45:17][352384571655374][689 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384571655374\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2354\"}'\'' -e'"" [2025-08-25 13:45:22][352384571655374][5499 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3fdb5c2-5f96-4392-b0b4-1d59e4aec102","id":"QR_c3fdb5c2-5f96-4392-b0b4-1d59e4aec102","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:45:22][352384571655374][5656 ms][DEBUG] proc_open done in 4966 ms; code=255; res.len=3343 [2025-08-25 13:45:22][352384571655374][5656 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-08-25 13:45:22][352384571655374][5656 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:45:24][352397450828839][0 ms][INFO] === Request start === [2025-08-25 13:45:24][352397450828839][1 ms][DEBUG] START check_scloud [2025-08-25 13:45:24][352397450828839][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:45:25][352397450828839][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 8249 4968 24028084 81456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:45:25][352397450828839][294 ms][DEBUG] targetPkg: running [2025-08-25 13:45:25][352397450828839][294 ms][DEBUG] END check_scloud in 294 ms [2025-08-25 13:45:25][352397450828839][295 ms][DEBUG] START check_boot_completed [2025-08-25 13:45:25][352397450828839][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:45:25][352397450828839][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:45:25][352397450828839][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:45:25][352397450828839][403 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:45:25][352397450828839][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:45:25][352397450828839][403 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:45:25][352397450828839][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450828839\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4518\"}'\'' -e'"" [2025-08-25 13:45:25][352397450828839][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:45:25][352397450828839][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450828839\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4518\"}'\'' -e'"" [2025-08-25 13:46:03][352397450828839][1 ms][INFO] === Request start === [2025-08-25 13:46:03][352397450828839][1 ms][DEBUG] START check_scloud [2025-08-25 13:46:03][352397450828839][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:46:04][352397450828839][559 ms][DEBUG] SU: done in 558 ms; out [2025-08-25 13:46:04][352397450828839][559 ms][WARN] targetPkg: not running, restarting [2025-08-25 13:46:04][352397450828839][559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:46:04][352397450828839][760 ms][DEBUG] SU: done in 201 ms; out [2025-08-25 13:46:04][352397450828839][760 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:46:04][352397450828839][1151 ms][DEBUG] SU: done in 391 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 13:46:06][352397450828839][3166 ms][DEBUG] END check_scloud in 3165 ms [2025-08-25 13:46:06][352397450828839][3166 ms][DEBUG] START check_boot_completed [2025-08-25 13:46:06][352397450828839][3166 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:46:06][352397450828839][3213 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:46:06][352397450828839][3213 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:46:07][352397450828839][3369 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 13:46:07][352397450828839][3369 ms][DEBUG] END check_boot_completed in 203 ms [2025-08-25 13:46:07][352397450828839][3369 ms][DEBUG] START check_internet [2025-08-25 13:46:07][352397450828839][3370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:46:07][352397450828839][4119 ms][DEBUG] SU: done in 750 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=418 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 418.047/418.047/418.047/0.000 ms\n [2025-08-25 13:46:07][352397450828839][4119 ms][DEBUG] check_internet: online [2025-08-25 13:46:07][352397450828839][4119 ms][DEBUG] END check_internet in 750 ms [2025-08-25 13:46:07][352397450828839][4119 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:46:07][352397450828839][4119 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450828839\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2631\"}'\'' -e'"" [2025-08-25 13:46:07][352397450828839][4120 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:46:07][352397450828839][4120 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450828839\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2631\"}'\'' -e'"" [2025-08-25 13:46:15][352397450828839][11492 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_368c04d8-ee5f-411b-a036-2aad68b4465e","id":"QR_368c04d8-ee5f-411b-a036-2aad68b4465e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:46:15][352397450828839][11648 ms][DEBUG] proc_open done in 7529 ms; code=255; res.len=3343 [2025-08-25 13:46:15][352397450828839][11649 ms][DEBUG] END runCmdUntilRes#1 in 7529 ms [2025-08-25 13:46:15][352397450828839][11649 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:46:44][359184982369331][0 ms][INFO] === Request start === [2025-08-25 13:46:44][359184982369331][1 ms][DEBUG] START check_scloud [2025-08-25 13:46:44][359184982369331][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:46:44][359184982369331][424 ms][DEBUG] SU: done in 423 ms; outu0_a118 17146 14587 23585940 66012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:46:44][359184982369331][424 ms][DEBUG] targetPkg: running [2025-08-25 13:46:44][359184982369331][424 ms][DEBUG] END check_scloud in 423 ms [2025-08-25 13:46:44][359184982369331][424 ms][DEBUG] START check_boot_completed [2025-08-25 13:46:44][359184982369331][424 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:46:44][359184982369331][455 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:46:44][359184982369331][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:46:44][359184982369331][517 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 13:46:44][359184982369331][517 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 13:46:44][359184982369331][518 ms][DEBUG] START check_internet [2025-08-25 13:46:44][359184982369331][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:46:44][359184982369331][799 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=160 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 160.739/160.739/160.739/0.000 ms\n [2025-08-25 13:46:44][359184982369331][799 ms][DEBUG] check_internet: online [2025-08-25 13:46:44][359184982369331][799 ms][DEBUG] END check_internet in 281 ms [2025-08-25 13:46:44][359184982369331][799 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:46:44][359184982369331][799 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359184982369331\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3828\"}'\'' -e'"" [2025-08-25 13:46:44][359184982369331][799 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:46:44][359184982369331][799 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359184982369331\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3828\"}'\'' -e'"" [2025-08-25 13:46:56][359184982369331][12499 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:46:56][359184982369331][12655 ms][DEBUG] proc_open done in 11856 ms; code=255; res.len=107 [2025-08-25 13:46:56][359184982369331][12655 ms][DEBUG] END runCmdUntilRes#1 in 11856 ms [2025-08-25 13:46:56][359184982369331][12655 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:46:57][][0 ms][INFO] === Request start === [2025-08-25 13:46:57][][1 ms][DEBUG] START check_scloud [2025-08-25 13:46:57][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:46:57][][324 ms][DEBUG] SU: done in 324 ms; outu0_a118 17146 14587 23718236 71344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:46:57][][325 ms][DEBUG] targetPkg: running [2025-08-25 13:46:57][][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-25 13:46:57][][325 ms][DEBUG] START check_boot_completed [2025-08-25 13:46:57][][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:46:57][][355 ms][DEBUG] ADB: done in 30 ms; out [2025-08-25 13:46:57][][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:46:57][][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:46:57][][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:46:57][][417 ms][DEBUG] START check_internet [2025-08-25 13:46:57][][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:46:57][][667 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=125 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 125.160/125.160/125.160/0.000 ms\n [2025-08-25 13:46:57][][667 ms][DEBUG] check_internet: online [2025-08-25 13:46:57][][667 ms][DEBUG] END check_internet in 250 ms [2025-08-25 13:46:57][][668 ms][DEBUG] rawBody.length=1129 [2025-08-25 13:46:57][][668 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T3002J1N\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5899\"}'\'' -e'"" [2025-08-25 13:46:57][][668 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:46:57][][668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T3002J1N\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5899\"}'\'' -e'"" [2025-08-25 13:47:02][][5025 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:47:02][][5182 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=107 [2025-08-25 13:47:02][][5182 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-08-25 13:47:02][][5182 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:47:04][359184982369331][1 ms][INFO] === Request start === [2025-08-25 13:47:04][359184982369331][1 ms][DEBUG] START check_scloud [2025-08-25 13:47:04][359184982369331][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:47:04][359184982369331][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 17146 14587 23870948 84400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:47:04][359184982369331][310 ms][DEBUG] targetPkg: running [2025-08-25 13:47:04][359184982369331][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 13:47:04][359184982369331][311 ms][DEBUG] START check_boot_completed [2025-08-25 13:47:04][359184982369331][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:47:04][359184982369331][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:47:04][359184982369331][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:47:04][359184982369331][435 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 13:47:04][359184982369331][435 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 13:47:04][359184982369331][435 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:47:04][359184982369331][435 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359184982369331\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3785\"}'\'' -e'"" [2025-08-25 13:47:04][359184982369331][435 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:47:04][359184982369331][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359184982369331\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3785\"}'\'' -e'"" [2025-08-25 13:47:09][359184982369331][5731 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a888d54-d907-498b-b484-48b4e256140b","id":"QR_8a888d54-d907-498b-b484-48b4e256140b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:47:10][359184982369331][5887 ms][DEBUG] proc_open done in 5451 ms; code=255; res.len=3343 [2025-08-25 13:47:10][359184982369331][5887 ms][DEBUG] END runCmdUntilRes#1 in 5452 ms [2025-08-25 13:47:10][359184982369331][5887 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:47:29][359184982369331][0 ms][INFO] === Request start === [2025-08-25 13:47:29][359184982369331][0 ms][DEBUG] START check_scloud [2025-08-25 13:47:29][359184982369331][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:47:29][359184982369331][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 17146 14587 23945536 71612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:47:29][359184982369331][282 ms][DEBUG] targetPkg: running [2025-08-25 13:47:29][359184982369331][282 ms][DEBUG] END check_scloud in 282 ms [2025-08-25 13:47:29][359184982369331][282 ms][DEBUG] START check_boot_completed [2025-08-25 13:47:29][359184982369331][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:47:29][359184982369331][329 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:47:29][359184982369331][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:47:29][359184982369331][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:47:29][359184982369331][375 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:47:29][359184982369331][375 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:47:29][359184982369331][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359184982369331\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2969\"}'\'' -e'"" [2025-08-25 13:47:29][359184982369331][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:47:29][359184982369331][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359184982369331\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2969\"}'\'' -e'"" [2025-08-25 13:47:33][359184982369331][4484 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:47:34][359184982369331][4640 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=107 [2025-08-25 13:47:34][359184982369331][4640 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-08-25 13:47:34][359184982369331][4640 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:47:34][][0 ms][INFO] === Request start === [2025-08-25 13:47:34][][1 ms][DEBUG] START check_scloud [2025-08-25 13:47:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:47:34][][339 ms][DEBUG] SU: done in 339 ms; outu0_a118 17146 14587 24116808 89112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:47:34][][339 ms][DEBUG] targetPkg: running [2025-08-25 13:47:34][][340 ms][DEBUG] END check_scloud in 339 ms [2025-08-25 13:47:34][][340 ms][DEBUG] START check_boot_completed [2025-08-25 13:47:34][][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:47:34][][386 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:47:34][][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:47:34][][433 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:47:34][][433 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 13:47:34][][433 ms][DEBUG] rawBody.length=1129 [2025-08-25 13:47:34][][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T3002J1N\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3004\"}'\'' -e'"" [2025-08-25 13:47:34][][433 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:47:34][][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T3002J1N\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3004\"}'\'' -e'"" [2025-08-25 13:47:38][][3776 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:47:38][][3932 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=107 [2025-08-25 13:47:38][][3932 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-08-25 13:47:38][][3932 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:47:40][359184982369331][0 ms][INFO] === Request start === [2025-08-25 13:47:40][359184982369331][1 ms][DEBUG] START check_scloud [2025-08-25 13:47:40][359184982369331][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:47:40][359184982369331][329 ms][DEBUG] SU: done in 329 ms; outu0_a118 17146 14587 24236880 99324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:47:40][359184982369331][329 ms][DEBUG] targetPkg: running [2025-08-25 13:47:40][359184982369331][329 ms][DEBUG] END check_scloud in 329 ms [2025-08-25 13:47:40][359184982369331][329 ms][DEBUG] START check_boot_completed [2025-08-25 13:47:40][359184982369331][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:47:40][359184982369331][374 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 13:47:40][359184982369331][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:47:40][359184982369331][421 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:47:40][359184982369331][421 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 13:47:40][359184982369331][422 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:47:40][359184982369331][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359184982369331\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1649\"}'\'' -e'"" [2025-08-25 13:47:40][359184982369331][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:47:40][359184982369331][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359184982369331\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1649\"}'\'' -e'"" [2025-08-25 13:47:44][359184982369331][4498 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70bfbc7f-9a31-4dee-a449-4edf999f6536","id":"QR_70bfbc7f-9a31-4dee-a449-4edf999f6536","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:47:44][359184982369331][4655 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 13:47:44][359184982369331][4655 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 13:47:44][359184982369331][4655 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:48:03][359290410171320][0 ms][INFO] === Request start === [2025-08-25 13:48:03][359290410171320][1 ms][DEBUG] START check_scloud [2025-08-25 13:48:03][359290410171320][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:48:03][359290410171320][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 17146 14587 24313708 108752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:48:03][359290410171320][333 ms][DEBUG] targetPkg: running [2025-08-25 13:48:03][359290410171320][333 ms][DEBUG] END check_scloud in 332 ms [2025-08-25 13:48:03][359290410171320][333 ms][DEBUG] START check_boot_completed [2025-08-25 13:48:03][359290410171320][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:48:03][359290410171320][364 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:48:03][359290410171320][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:48:03][359290410171320][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:48:03][359290410171320][411 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:48:03][359290410171320][411 ms][DEBUG] START check_internet [2025-08-25 13:48:03][359290410171320][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:48:04][359290410171320][692 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=170 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 170.890/170.890/170.890/0.000 ms\n [2025-08-25 13:48:04][359290410171320][693 ms][DEBUG] check_internet: online [2025-08-25 13:48:04][359290410171320][693 ms][DEBUG] END check_internet in 282 ms [2025-08-25 13:48:04][359290410171320][693 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:48:04][359290410171320][693 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359290410171320\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9179\"}'\'' -e'"" [2025-08-25 13:48:04][359290410171320][693 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:48:04][359290410171320][693 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359290410171320\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9179\"}'\'' -e'"" [2025-08-25 13:48:07][359290410171320][4566 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59055415-8827-4302-82cf-70e3fdf0317b","id":"QR_59055415-8827-4302-82cf-70e3fdf0317b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:48:08][359290410171320][4723 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-25 13:48:08][359290410171320][4723 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-25 13:48:08][359290410171320][4723 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:50:04][350290812097049][1 ms][INFO] === Request start === [2025-08-25 13:50:04][350290812097049][1 ms][DEBUG] START check_scloud [2025-08-25 13:50:04][350290812097049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:50:04][350290812097049][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 17146 14587 24434564 123364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:50:04][350290812097049][325 ms][DEBUG] targetPkg: running [2025-08-25 13:50:04][350290812097049][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-25 13:50:04][350290812097049][325 ms][DEBUG] START check_boot_completed [2025-08-25 13:50:04][350290812097049][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:50:04][350290812097049][357 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:50:04][350290812097049][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:50:04][350290812097049][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:50:04][350290812097049][404 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 13:50:04][350290812097049][404 ms][DEBUG] START check_internet [2025-08-25 13:50:04][350290812097049][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:50:05][350290812097049][919 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.633/200.633/200.633/0.000 ms\n [2025-08-25 13:50:05][350290812097049][919 ms][DEBUG] check_internet: online [2025-08-25 13:50:05][350290812097049][919 ms][DEBUG] END check_internet in 516 ms [2025-08-25 13:50:05][350290812097049][919 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:50:05][350290812097049][919 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812097049\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8766\"}'\'' -e'"" [2025-08-25 13:50:05][350290812097049][920 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:50:05][350290812097049][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812097049\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8766\"}'\'' -e'"" [2025-08-25 13:50:08][350290812097049][4543 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:50:09][350290812097049][4699 ms][DEBUG] proc_open done in 3779 ms; code=255; res.len=107 [2025-08-25 13:50:09][350290812097049][4699 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-25 13:50:09][350290812097049][4699 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:50:09][][0 ms][INFO] === Request start === [2025-08-25 13:50:09][][1 ms][DEBUG] START check_scloud [2025-08-25 13:50:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:50:09][][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 17146 14587 24581260 134748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:50:09][][290 ms][DEBUG] targetPkg: running [2025-08-25 13:50:09][][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-25 13:50:09][][290 ms][DEBUG] START check_boot_completed [2025-08-25 13:50:09][][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:50:09][][335 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 13:50:09][][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:50:09][][397 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 13:50:09][][398 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 13:50:09][][398 ms][DEBUG] START check_internet [2025-08-25 13:50:09][][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:50:10][][679 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.825/143.825/143.825/0.000 ms\n [2025-08-25 13:50:10][][679 ms][DEBUG] check_internet: online [2025-08-25 13:50:10][][679 ms][DEBUG] END check_internet in 281 ms [2025-08-25 13:50:10][][679 ms][DEBUG] rawBody.length=1129 [2025-08-25 13:50:10][][679 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX40D16AR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2103\"}'\'' -e'"" [2025-08-25 13:50:10][][679 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:50:10][][679 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX40D16AR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2103\"}'\'' -e'"" [2025-08-25 13:50:13][][4006 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:50:13][][4162 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=107 [2025-08-25 13:50:13][][4162 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-08-25 13:50:13][][4162 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:50:15][350290812097049][0 ms][INFO] === Request start === [2025-08-25 13:50:15][350290812097049][1 ms][DEBUG] START check_scloud [2025-08-25 13:50:15][350290812097049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:50:15][350290812097049][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 17146 14587 24723860 146228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:50:15][350290812097049][258 ms][DEBUG] targetPkg: running [2025-08-25 13:50:15][350290812097049][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-25 13:50:15][350290812097049][258 ms][DEBUG] START check_boot_completed [2025-08-25 13:50:15][350290812097049][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:50:15][350290812097049][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:50:15][350290812097049][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:50:15][350290812097049][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:50:15][350290812097049][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:50:15][350290812097049][351 ms][DEBUG] START check_internet [2025-08-25 13:50:15][350290812097049][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:50:16][350290812097049][601 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.868/143.868/143.868/0.000 ms\n [2025-08-25 13:50:16][350290812097049][601 ms][DEBUG] check_internet: online [2025-08-25 13:50:16][350290812097049][601 ms][DEBUG] END check_internet in 250 ms [2025-08-25 13:50:16][350290812097049][601 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:50:16][350290812097049][601 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812097049\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4327\"}'\'' -e'"" [2025-08-25 13:50:16][350290812097049][601 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:50:16][350290812097049][601 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812097049\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4327\"}'\'' -e'"" [2025-08-25 13:50:20][350290812097049][5193 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8256376f-eb33-4a6e-9493-5b631ce85eb1","id":"QR_8256376f-eb33-4a6e-9493-5b631ce85eb1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:50:20][350290812097049][5350 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=3343 [2025-08-25 13:50:20][350290812097049][5350 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-08-25 13:50:20][350290812097049][5350 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:53:03][350832440368324][1 ms][INFO] === Request start === [2025-08-25 13:53:03][350832440368324][1 ms][DEBUG] START check_scloud [2025-08-25 13:53:03][350832440368324][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:53:03][350832440368324][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 17146 14587 24855724 157464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:53:03][350832440368324][300 ms][DEBUG] targetPkg: running [2025-08-25 13:53:03][350832440368324][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 13:53:03][350832440368324][300 ms][DEBUG] START check_boot_completed [2025-08-25 13:53:03][350832440368324][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:53:03][350832440368324][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:53:03][350832440368324][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:53:03][350832440368324][394 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 13:53:03][350832440368324][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 13:53:03][350832440368324][394 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:53:03][350832440368324][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832440368324\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7402\"}'\'' -e'"" [2025-08-25 13:53:03][350832440368324][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:53:03][350832440368324][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832440368324\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7402\"}'\'' -e'"" [2025-08-25 13:53:08][350832440368324][5111 ms][DEBUG] proc_open done in 4717 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 13:53:08][350832440368324][5111 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-08-25 13:53:08][350832440368324][5111 ms][WARN] Detected error: Process with pid 17146 either refused to load frida-agent, or terminated during injection [2025-08-25 13:53:08][350832440368324][5111 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 13:53:08][350832440368324][5252 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 13:53:08][350832440368324][5252 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 13:53:08][350832440368324][5252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:53:08][350832440368324][5408 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 13:53:08][350832440368324][5408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:53:08][350832440368324][5580 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 13:53:10][350832440368324][7595 ms][DEBUG] START check_boot_completed [2025-08-25 13:53:10][350832440368324][7595 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:53:10][350832440368324][7642 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:53:10][350832440368324][7642 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:53:10][350832440368324][7689 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:53:10][350832440368324][7689 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 13:53:13][350832440368324][10703 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 13:53:13][350832440368324][10704 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832440368324\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7402\"}'\'' -e'"" [2025-08-25 13:53:18][350832440368324][14781 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_287343ab-6505-405d-8179-09a805aa0def","id":"QR_287343ab-6505-405d-8179-09a805aa0def","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:53:18][350832440368324][14937 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 13:53:18][350832440368324][14937 ms][DEBUG] END runCmdUntilRes#2 in 4234 ms [2025-08-25 13:53:18][350832440368324][14937 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:53:21][356408514379622][0 ms][INFO] === Request start === [2025-08-25 13:53:21][356408514379622][1 ms][DEBUG] START check_scloud [2025-08-25 13:53:21][356408514379622][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:53:22][356408514379622][237 ms][DEBUG] SU: done in 236 ms; outu0_a118 28201 14587 23628512 123808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:53:22][356408514379622][237 ms][DEBUG] targetPkg: running [2025-08-25 13:53:22][356408514379622][237 ms][DEBUG] END check_scloud in 236 ms [2025-08-25 13:53:22][356408514379622][237 ms][DEBUG] START check_boot_completed [2025-08-25 13:53:22][356408514379622][237 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:53:22][356408514379622][283 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:53:22][356408514379622][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:53:22][356408514379622][330 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:53:22][356408514379622][330 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:53:22][356408514379622][330 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:53:22][356408514379622][330 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356408514379622\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6289\"}'\'' -e'"" [2025-08-25 13:53:22][356408514379622][330 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:53:22][356408514379622][330 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356408514379622\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6289\"}'\'' -e'"" [2025-08-25 13:53:29][356408514379622][7484 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d7a2fdb-4445-40e8-902f-6cc15917e22d","id":"QR_7d7a2fdb-4445-40e8-902f-6cc15917e22d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:53:29][356408514379622][7641 ms][DEBUG] proc_open done in 7310 ms; code=255; res.len=3343 [2025-08-25 13:53:29][356408514379622][7641 ms][DEBUG] END runCmdUntilRes#1 in 7310 ms [2025-08-25 13:53:29][356408514379622][7641 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:56:03][351364030765502][1 ms][INFO] === Request start === [2025-08-25 13:56:03][351364030765502][1 ms][DEBUG] START check_scloud [2025-08-25 13:56:03][351364030765502][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:56:04][351364030765502][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 28201 14587 23647792 137776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:56:04][351364030765502][298 ms][DEBUG] targetPkg: running [2025-08-25 13:56:04][351364030765502][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 13:56:04][351364030765502][298 ms][DEBUG] START check_boot_completed [2025-08-25 13:56:04][351364030765502][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:56:04][351364030765502][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:56:04][351364030765502][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:56:04][351364030765502][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:56:04][351364030765502][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:56:04][351364030765502][392 ms][DEBUG] START check_internet [2025-08-25 13:56:04][351364030765502][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:56:04][351364030765502][860 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.319/200.319/200.319/0.000 ms\n [2025-08-25 13:56:04][351364030765502][861 ms][DEBUG] check_internet: online [2025-08-25 13:56:04][351364030765502][861 ms][DEBUG] END check_internet in 469 ms [2025-08-25 13:56:04][351364030765502][861 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:56:04][351364030765502][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351364030765502\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2249\"}'\'' -e'"" [2025-08-25 13:56:04][351364030765502][861 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:56:04][351364030765502][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351364030765502\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2249\"}'\'' -e'"" [2025-08-25 13:56:09][351364030765502][5172 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a847c5e6-5691-4b7b-9ad3-0795be775b00","id":"QR_a847c5e6-5691-4b7b-9ad3-0795be775b00","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:56:09][351364030765502][5328 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-25 13:56:09][351364030765502][5328 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-25 13:56:09][351364030765502][5328 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:57:03][350637544907632][0 ms][INFO] === Request start === [2025-08-25 13:57:03][350637544907632][1 ms][DEBUG] START check_scloud [2025-08-25 13:57:03][350637544907632][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:57:03][350637544907632][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 28201 14587 23801748 149900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:57:03][350637544907632][298 ms][DEBUG] targetPkg: running [2025-08-25 13:57:03][350637544907632][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 13:57:03][350637544907632][299 ms][DEBUG] START check_boot_completed [2025-08-25 13:57:03][350637544907632][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:57:03][350637544907632][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:57:03][350637544907632][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:57:03][350637544907632][408 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 13:57:03][350637544907632][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:57:03][350637544907632][408 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:57:03][350637544907632][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544907632\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7105\"}'\'' -e'"" [2025-08-25 13:57:03][350637544907632][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:57:03][350637544907632][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544907632\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7105\"}'\'' -e'"" [2025-08-25 13:57:07][350637544907632][4266 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b60e5ab-9143-40cb-ab19-ac668463ca1f","id":"QR_6b60e5ab-9143-40cb-ab19-ac668463ca1f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:57:07][350637544907632][4422 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-25 13:57:07][350637544907632][4422 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-25 13:57:07][350637544907632][4422 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:58:03][350498053904340][0 ms][INFO] === Request start === [2025-08-25 13:58:03][350498053904340][1 ms][DEBUG] START check_scloud [2025-08-25 13:58:03][350498053904340][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:58:03][350498053904340][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 28201 14587 23959636 160908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:58:03][350498053904340][307 ms][DEBUG] targetPkg: running [2025-08-25 13:58:03][350498053904340][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 13:58:03][350498053904340][307 ms][DEBUG] START check_boot_completed [2025-08-25 13:58:03][350498053904340][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:58:03][350498053904340][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:58:03][350498053904340][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:58:03][350498053904340][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:58:03][350498053904340][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:58:03][350498053904340][400 ms][DEBUG] START check_internet [2025-08-25 13:58:03][350498053904340][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:58:03][350498053904340][775 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.710/256.710/256.710/0.000 ms\n [2025-08-25 13:58:03][350498053904340][775 ms][DEBUG] check_internet: online [2025-08-25 13:58:03][350498053904340][775 ms][DEBUG] END check_internet in 375 ms [2025-08-25 13:58:03][350498053904340][775 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:58:03][350498053904340][775 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498053904340\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4964\"}'\'' -e'"" [2025-08-25 13:58:03][350498053904340][775 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:58:03][350498053904340][775 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498053904340\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4964\"}'\'' -e'"" [2025-08-25 13:58:08][350498053904340][4821 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7682170f-b9a8-4301-b626-7a8624445a09","id":"QR_7682170f-b9a8-4301-b626-7a8624445a09","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:58:08][350498053904340][4977 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-25 13:58:08][350498053904340][4977 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 13:58:08][350498053904340][4977 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:58:10][352978605129734][1 ms][INFO] === Request start === [2025-08-25 13:58:10][352978605129734][1 ms][DEBUG] START check_scloud [2025-08-25 13:58:10][352978605129734][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:58:11][352978605129734][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 28201 14587 24124764 171704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:58:11][352978605129734][304 ms][DEBUG] targetPkg: running [2025-08-25 13:58:11][352978605129734][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 13:58:11][352978605129734][304 ms][DEBUG] START check_boot_completed [2025-08-25 13:58:11][352978605129734][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:58:11][352978605129734][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:58:11][352978605129734][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:58:11][352978605129734][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:58:11][352978605129734][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:58:11][352978605129734][397 ms][DEBUG] START check_internet [2025-08-25 13:58:11][352978605129734][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:58:11][352978605129734][772 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=264 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 264.769/264.769/264.769/0.000 ms\n [2025-08-25 13:58:11][352978605129734][772 ms][DEBUG] check_internet: online [2025-08-25 13:58:11][352978605129734][772 ms][DEBUG] END check_internet in 375 ms [2025-08-25 13:58:11][352978605129734][772 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:58:11][352978605129734][772 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978605129734\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2431\"}'\'' -e'"" [2025-08-25 13:58:11][352978605129734][772 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:58:11][352978605129734][772 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978605129734\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2431\"}'\'' -e'"" [2025-08-25 13:58:15][352978605129734][4505 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ce938d9-b425-4fbd-875f-cda63c25d02e","id":"QR_0ce938d9-b425-4fbd-875f-cda63c25d02e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:58:15][352978605129734][4662 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-25 13:58:15][352978605129734][4662 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-25 13:58:15][352978605129734][4662 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:58:18][351007339945016][0 ms][INFO] === Request start === [2025-08-25 13:58:18][351007339945016][1 ms][DEBUG] START check_scloud [2025-08-25 13:58:18][351007339945016][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:58:19][351007339945016][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 28201 14587 24298084 183600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:58:19][351007339945016][299 ms][DEBUG] targetPkg: running [2025-08-25 13:58:19][351007339945016][299 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 13:58:19][351007339945016][299 ms][DEBUG] START check_boot_completed [2025-08-25 13:58:19][351007339945016][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:58:19][351007339945016][345 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 13:58:19][351007339945016][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:58:19][351007339945016][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:58:19][351007339945016][407 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 13:58:19][351007339945016][407 ms][DEBUG] START check_internet [2025-08-25 13:58:19][351007339945016][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:58:19][351007339945016][766 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.784/231.784/231.784/0.000 ms\n [2025-08-25 13:58:19][351007339945016][767 ms][DEBUG] check_internet: online [2025-08-25 13:58:19][351007339945016][767 ms][DEBUG] END check_internet in 359 ms [2025-08-25 13:58:19][351007339945016][767 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:58:19][351007339945016][767 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007339945016\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4566\"}'\'' -e'"" [2025-08-25 13:58:19][351007339945016][767 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:58:19][351007339945016][767 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007339945016\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4566\"}'\'' -e'"" [2025-08-25 13:58:24][351007339945016][5031 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:58:24][351007339945016][5187 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=107 [2025-08-25 13:58:24][351007339945016][5187 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-25 13:58:24][351007339945016][5187 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:58:24][][0 ms][INFO] === Request start === [2025-08-25 13:58:24][][1 ms][DEBUG] START check_scloud [2025-08-25 13:58:24][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:58:24][][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 28201 14587 24422024 194244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:58:24][][309 ms][DEBUG] targetPkg: running [2025-08-25 13:58:24][][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 13:58:24][][309 ms][DEBUG] START check_boot_completed [2025-08-25 13:58:24][][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:58:24][][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:58:24][][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:58:24][][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:58:24][][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:58:24][][402 ms][DEBUG] START check_internet [2025-08-25 13:58:24][][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:58:25][][668 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=172 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 172.166/172.166/172.166/0.000 ms\n [2025-08-25 13:58:25][][668 ms][DEBUG] check_internet: online [2025-08-25 13:58:25][][668 ms][DEBUG] END check_internet in 266 ms [2025-08-25 13:58:25][][668 ms][DEBUG] rawBody.length=1129 [2025-08-25 13:58:25][][668 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXC0XPZ6V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1527\"}'\'' -e'"" [2025-08-25 13:58:25][][668 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:58:25][][668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXC0XPZ6V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1527\"}'\'' -e'"" [2025-08-25 13:58:28][][4011 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:58:28][][4167 ms][DEBUG] proc_open done in 3498 ms; code=255; res.len=107 [2025-08-25 13:58:28][][4167 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-08-25 13:58:28][][4167 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:58:30][351007339945016][0 ms][INFO] === Request start === [2025-08-25 13:58:30][351007339945016][1 ms][DEBUG] START check_scloud [2025-08-25 13:58:30][351007339945016][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:58:31][351007339945016][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 28201 14587 24570604 206328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:58:31][351007339945016][258 ms][DEBUG] targetPkg: running [2025-08-25 13:58:31][351007339945016][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-25 13:58:31][351007339945016][258 ms][DEBUG] START check_boot_completed [2025-08-25 13:58:31][351007339945016][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:58:31][351007339945016][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:58:31][351007339945016][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:58:31][351007339945016][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:58:31][351007339945016][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 13:58:31][351007339945016][351 ms][DEBUG] START check_internet [2025-08-25 13:58:31][351007339945016][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 13:58:31][351007339945016][695 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.659/251.659/251.659/0.000 ms\n [2025-08-25 13:58:31][351007339945016][695 ms][DEBUG] check_internet: online [2025-08-25 13:58:31][351007339945016][695 ms][DEBUG] END check_internet in 344 ms [2025-08-25 13:58:31][351007339945016][695 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:58:31][351007339945016][695 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007339945016\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5743\"}'\'' -e'"" [2025-08-25 13:58:31][351007339945016][695 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:58:31][351007339945016][695 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007339945016\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5743\"}'\'' -e'"" [2025-08-25 13:58:36][351007339945016][6053 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e13c8d8-f7e5-4e39-822b-df942071d7f6","id":"QR_9e13c8d8-f7e5-4e39-822b-df942071d7f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:58:37][351007339945016][6209 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-08-25 13:58:37][351007339945016][6209 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-25 13:58:37][351007339945016][6209 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 13:59:29][351477972923291][0 ms][INFO] === Request start === [2025-08-25 13:59:29][351477972923291][1 ms][DEBUG] START check_scloud [2025-08-25 13:59:29][351477972923291][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:59:29][351477972923291][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 28201 14587 24680200 217496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:59:29][351477972923291][298 ms][DEBUG] targetPkg: running [2025-08-25 13:59:29][351477972923291][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 13:59:29][351477972923291][298 ms][DEBUG] START check_boot_completed [2025-08-25 13:59:29][351477972923291][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:59:30][351477972923291][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 13:59:30][351477972923291][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:59:30][351477972923291][393 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 13:59:30][351477972923291][393 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 13:59:30][351477972923291][393 ms][DEBUG] rawBody.length=1148 [2025-08-25 13:59:30][351477972923291][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972923291\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7224\"}'\'' -e'"" [2025-08-25 13:59:30][351477972923291][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:59:30][351477972923291][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972923291\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7224\"}'\'' -e'"" [2025-08-25 13:59:33][351477972923291][4281 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:59:34][351477972923291][4437 ms][DEBUG] proc_open done in 4043 ms; code=255; res.len=107 [2025-08-25 13:59:34][351477972923291][4437 ms][DEBUG] END runCmdUntilRes#1 in 4043 ms [2025-08-25 13:59:34][351477972923291][4437 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:59:34][][0 ms][INFO] === Request start === [2025-08-25 13:59:34][][1 ms][DEBUG] START check_scloud [2025-08-25 13:59:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:59:34][][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 28201 14587 24816656 229388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:59:34][][316 ms][DEBUG] targetPkg: running [2025-08-25 13:59:34][][316 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 13:59:34][][316 ms][DEBUG] START check_boot_completed [2025-08-25 13:59:34][][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:59:34][][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 13:59:34][][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:59:34][][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 13:59:34][][395 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 13:59:34][][395 ms][DEBUG] rawBody.length=1129 [2025-08-25 13:59:34][][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XB0SJA6Y\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7272\"}'\'' -e'"" [2025-08-25 13:59:34][][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:59:34][][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XB0SJA6Y\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7272\"}'\'' -e'"" [2025-08-25 13:59:38][][3659 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 13:59:38][][3815 ms][DEBUG] proc_open done in 3420 ms; code=255; res.len=107 [2025-08-25 13:59:38][][3815 ms][DEBUG] END runCmdUntilRes#1 in 3420 ms [2025-08-25 13:59:38][][3815 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 13:59:40][351477972923291][0 ms][INFO] === Request start === [2025-08-25 13:59:40][351477972923291][1 ms][DEBUG] START check_scloud [2025-08-25 13:59:40][351477972923291][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 13:59:40][351477972923291][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 28201 14587 24951068 241280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 13:59:40][351477972923291][324 ms][DEBUG] targetPkg: running [2025-08-25 13:59:40][351477972923291][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-25 13:59:40][351477972923291][324 ms][DEBUG] START check_boot_completed [2025-08-25 13:59:40][351477972923291][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:59:40][351477972923291][371 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:59:40][351477972923291][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:59:40][351477972923291][433 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 13:59:40][351477972923291][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 13:59:40][351477972923291][434 ms][DEBUG] rawBody.length=1149 [2025-08-25 13:59:40][351477972923291][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972923291\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6944\"}'\'' -e'"" [2025-08-25 13:59:40][351477972923291][434 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 13:59:40][351477972923291][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972923291\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6944\"}'\'' -e'"" [2025-08-25 13:59:44][351477972923291][4214 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 13:59:44][351477972923291][4214 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-25 13:59:44][351477972923291][4214 ms][WARN] Detected error: Process with pid 28201 either refused to load frida-agent, or terminated during injection [2025-08-25 13:59:44][351477972923291][4214 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 13:59:44][351477972923291][4354 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 13:59:44][351477972923291][4354 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 13:59:44][351477972923291][4354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 13:59:44][351477972923291][4495 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 13:59:44][351477972923291][4495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 13:59:44][351477972923291][4651 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 13:59:46][351477972923291][6666 ms][DEBUG] START check_boot_completed [2025-08-25 13:59:46][351477972923291][6666 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 13:59:46][351477972923291][6713 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 13:59:46][351477972923291][6713 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 13:59:46][351477972923291][6807 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 13:59:46][351477972923291][6807 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 13:59:50][351477972923291][9822 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 13:59:50][351477972923291][9822 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972923291\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6944\"}'\'' -e'"" [2025-08-25 13:59:55][351477972923291][14930 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e13cf7ea-1906-4639-b4b7-f99cd875344e","id":"QR_e13cf7ea-1906-4639-b4b7-f99cd875344e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 13:59:55][351477972923291][15086 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-08-25 13:59:55][351477972923291][15086 ms][DEBUG] END runCmdUntilRes#2 in 5264 ms [2025-08-25 13:59:55][351477972923291][15086 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:00:06][351782253725525][1 ms][INFO] === Request start === [2025-08-25 14:00:06][351782253725525][1 ms][DEBUG] START check_scloud [2025-08-25 14:00:06][351782253725525][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:00:07][351782253725525][242 ms][DEBUG] SU: done in 241 ms; outu0_a118 29464 14587 23650568 127144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:00:07][351782253725525][242 ms][DEBUG] targetPkg: running [2025-08-25 14:00:07][351782253725525][242 ms][DEBUG] END check_scloud in 241 ms [2025-08-25 14:00:07][351782253725525][242 ms][DEBUG] START check_boot_completed [2025-08-25 14:00:07][351782253725525][242 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:00:07][351782253725525][289 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:00:07][351782253725525][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:00:07][351782253725525][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:00:07][351782253725525][336 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:00:07][351782253725525][336 ms][DEBUG] START check_internet [2025-08-25 14:00:07][351782253725525][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:00:07][351782253725525][820 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.653/202.653/202.653/0.000 ms\n [2025-08-25 14:00:07][351782253725525][820 ms][DEBUG] check_internet: online [2025-08-25 14:00:07][351782253725525][820 ms][DEBUG] END check_internet in 484 ms [2025-08-25 14:00:07][351782253725525][820 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:00:07][351782253725525][820 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351782253725525\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9730\"}'\'' -e'"" [2025-08-25 14:00:07][351782253725525][820 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:00:07][351782253725525][820 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351782253725525\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9730\"}'\'' -e'"" [2025-08-25 14:00:13][351782253725525][6990 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2990a521-c6e8-4ee9-85ed-4330c7a886e1","id":"QR_2990a521-c6e8-4ee9-85ed-4330c7a886e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:00:14][351782253725525][7147 ms][DEBUG] proc_open done in 6326 ms; code=255; res.len=3343 [2025-08-25 14:00:14][351782253725525][7147 ms][DEBUG] END runCmdUntilRes#1 in 6326 ms [2025-08-25 14:00:14][351782253725525][7147 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:00:18][350250413372142][0 ms][INFO] === Request start === [2025-08-25 14:00:18][350250413372142][1 ms][DEBUG] START check_scloud [2025-08-25 14:00:18][350250413372142][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:00:19][350250413372142][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 29464 14587 23725116 138248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:00:19][350250413372142][259 ms][DEBUG] targetPkg: running [2025-08-25 14:00:19][350250413372142][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-25 14:00:19][350250413372142][259 ms][DEBUG] START check_boot_completed [2025-08-25 14:00:19][350250413372142][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:00:19][350250413372142][306 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:00:19][350250413372142][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:00:19][350250413372142][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:00:19][350250413372142][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:00:19][350250413372142][353 ms][DEBUG] START check_internet [2025-08-25 14:00:19][350250413372142][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:00:19][350250413372142][681 ms][DEBUG] SU: done in 329 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=235 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 235.763/235.763/235.763/0.000 ms\n [2025-08-25 14:00:19][350250413372142][681 ms][DEBUG] check_internet: online [2025-08-25 14:00:19][350250413372142][682 ms][DEBUG] END check_internet in 329 ms [2025-08-25 14:00:19][350250413372142][682 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:00:19][350250413372142][682 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250413372142\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7943\"}'\'' -e'"" [2025-08-25 14:00:19][350250413372142][682 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:00:19][350250413372142][682 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250413372142\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7943\"}'\'' -e'"" [2025-08-25 14:00:23][350250413372142][4711 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe050800-96ca-4fc2-8d90-1abcb663b494","id":"QR_fe050800-96ca-4fc2-8d90-1abcb663b494","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:00:23][350250413372142][4867 ms][DEBUG] proc_open done in 4185 ms; code=255; res.len=3343 [2025-08-25 14:00:23][350250413372142][4867 ms][DEBUG] END runCmdUntilRes#1 in 4185 ms [2025-08-25 14:00:23][350250413372142][4867 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:00:26][351007339756322][0 ms][INFO] === Request start === [2025-08-25 14:00:26][351007339756322][1 ms][DEBUG] START check_scloud [2025-08-25 14:00:26][351007339756322][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:00:26][351007339756322][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 29464 14587 23853380 150188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:00:26][351007339756322][269 ms][DEBUG] targetPkg: running [2025-08-25 14:00:26][351007339756322][269 ms][DEBUG] END check_scloud in 269 ms [2025-08-25 14:00:26][351007339756322][269 ms][DEBUG] START check_boot_completed [2025-08-25 14:00:26][351007339756322][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:00:26][351007339756322][316 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:00:26][351007339756322][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:00:26][351007339756322][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:00:26][351007339756322][363 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 14:00:26][351007339756322][363 ms][DEBUG] START check_internet [2025-08-25 14:00:26][351007339756322][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:00:26][351007339756322][660 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.330/198.330/198.330/0.000 ms\n [2025-08-25 14:00:26][351007339756322][660 ms][DEBUG] check_internet: online [2025-08-25 14:00:26][351007339756322][660 ms][DEBUG] END check_internet in 297 ms [2025-08-25 14:00:26][351007339756322][660 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:00:26][351007339756322][660 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007339756322\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7676\"}'\'' -e'"" [2025-08-25 14:00:26][351007339756322][660 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:00:26][351007339756322][660 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007339756322\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7676\"}'\'' -e'"" [2025-08-25 14:00:30][351007339756322][4487 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52b92fa3-8c41-41e7-bd6f-c3a221ef5398","id":"QR_52b92fa3-8c41-41e7-bd6f-c3a221ef5398","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:00:30][351007339756322][4643 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-25 14:00:30][351007339756322][4643 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 14:00:30][351007339756322][4643 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:02:03][350299949995967][1 ms][INFO] === Request start === [2025-08-25 14:02:03][350299949995967][1 ms][DEBUG] START check_scloud [2025-08-25 14:02:03][350299949995967][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:02:03][350299949995967][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 29464 14587 23969072 161116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:02:03][350299949995967][310 ms][DEBUG] targetPkg: running [2025-08-25 14:02:03][350299949995967][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 14:02:03][350299949995967][310 ms][DEBUG] START check_boot_completed [2025-08-25 14:02:03][350299949995967][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:02:03][350299949995967][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:02:03][350299949995967][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:02:03][350299949995967][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:02:03][350299949995967][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 14:02:03][350299949995967][388 ms][DEBUG] START check_internet [2025-08-25 14:02:03][350299949995967][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:02:03][350299949995967][685 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.405/187.405/187.405/0.000 ms\n [2025-08-25 14:02:03][350299949995967][685 ms][DEBUG] check_internet: online [2025-08-25 14:02:03][350299949995967][685 ms][DEBUG] END check_internet in 297 ms [2025-08-25 14:02:03][350299949995967][685 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:02:03][350299949995967][685 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299949995967\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4594\"}'\'' -e'"" [2025-08-25 14:02:03][350299949995967][685 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:02:03][350299949995967][685 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299949995967\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4594\"}'\'' -e'"" [2025-08-25 14:02:07][350299949995967][4574 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a12f084c-9150-44e1-b799-3337aa6885f7","id":"QR_a12f084c-9150-44e1-b799-3337aa6885f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:02:07][350299949995967][4730 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-25 14:02:07][350299949995967][4731 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-25 14:02:07][350299949995967][4731 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:02:11][350336260576867][0 ms][INFO] === Request start === [2025-08-25 14:02:11][350336260576867][1 ms][DEBUG] START check_scloud [2025-08-25 14:02:11][350336260576867][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:02:11][350336260576867][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 29464 14587 24142200 172800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:02:11][350336260576867][276 ms][DEBUG] targetPkg: running [2025-08-25 14:02:11][350336260576867][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-25 14:02:11][350336260576867][276 ms][DEBUG] START check_boot_completed [2025-08-25 14:02:11][350336260576867][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:02:11][350336260576867][321 ms][DEBUG] ADB: done in 44 ms; out [2025-08-25 14:02:11][350336260576867][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:02:11][350336260576867][369 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 14:02:11][350336260576867][369 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:02:11][350336260576867][370 ms][DEBUG] START check_internet [2025-08-25 14:02:11][350336260576867][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:02:12][350336260576867][711 ms][DEBUG] SU: done in 342 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.313/196.313/196.313/0.000 ms\n [2025-08-25 14:02:12][350336260576867][711 ms][DEBUG] check_internet: online [2025-08-25 14:02:12][350336260576867][711 ms][DEBUG] END check_internet in 342 ms [2025-08-25 14:02:12][350336260576867][712 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:02:12][350336260576867][712 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350336260576867\",\"model\":\"SM-G991U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1852\"}'\'' -e'"" [2025-08-25 14:02:12][350336260576867][712 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:02:12][350336260576867][712 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350336260576867\",\"model\":\"SM-G991U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1852\"}'\'' -e'"" [2025-08-25 14:02:17][350336260576867][5866 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c66f7ac-b784-418a-9fb0-d11c8a5557c7","id":"QR_0c66f7ac-b784-418a-9fb0-d11c8a5557c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:02:17][350336260576867][6022 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-25 14:02:17][350336260576867][6022 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-25 14:02:17][350336260576867][6022 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:03:03][356280234142568][0 ms][INFO] === Request start === [2025-08-25 14:03:03][356280234142568][1 ms][DEBUG] START check_scloud [2025-08-25 14:03:03][356280234142568][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:03:04][356280234142568][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 29464 14587 24281776 183860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:03:04][356280234142568][303 ms][DEBUG] targetPkg: running [2025-08-25 14:03:04][356280234142568][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 14:03:04][356280234142568][303 ms][DEBUG] START check_boot_completed [2025-08-25 14:03:04][356280234142568][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:03:04][356280234142568][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:03:04][356280234142568][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:03:04][356280234142568][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:03:04][356280234142568][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 14:03:04][356280234142568][397 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:03:04][356280234142568][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356280234142568\",\"model\":\"SM-A725F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2605\"}'\'' -e'"" [2025-08-25 14:03:04][356280234142568][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:03:04][356280234142568][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356280234142568\",\"model\":\"SM-A725F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2605\"}'\'' -e'"" [2025-08-25 14:03:08][356280234142568][4552 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7db545a2-d507-48b7-a2b7-8dd454bcdf01","id":"QR_7db545a2-d507-48b7-a2b7-8dd454bcdf01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:03:08][356280234142568][4708 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 14:03:08][356280234142568][4708 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 14:03:08][356280234142568][4708 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:04:03][358141435197454][0 ms][INFO] === Request start === [2025-08-25 14:04:03][358141435197454][1 ms][DEBUG] START check_scloud [2025-08-25 14:04:03][358141435197454][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:04:03][358141435197454][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 29464 14587 24424756 195080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:04:03][358141435197454][277 ms][DEBUG] targetPkg: running [2025-08-25 14:04:03][358141435197454][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-25 14:04:03][358141435197454][277 ms][DEBUG] START check_boot_completed [2025-08-25 14:04:03][358141435197454][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:04:03][358141435197454][324 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:04:03][358141435197454][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:04:04][358141435197454][372 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 14:04:04][358141435197454][372 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 14:04:04][358141435197454][372 ms][DEBUG] START check_internet [2025-08-25 14:04:04][358141435197454][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:04:04][358141435197454][668 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=169 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 169.663/169.663/169.663/0.000 ms\n [2025-08-25 14:04:04][358141435197454][668 ms][DEBUG] check_internet: online [2025-08-25 14:04:04][358141435197454][668 ms][DEBUG] END check_internet in 296 ms [2025-08-25 14:04:04][358141435197454][668 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:04:04][358141435197454][668 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435197454\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6555\"}'\'' -e'"" [2025-08-25 14:04:04][358141435197454][668 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:04:04][358141435197454][668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435197454\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6555\"}'\'' -e'"" [2025-08-25 14:04:08][358141435197454][5307 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b4c7da7-f986-4820-a6ec-64e093acb004","id":"QR_4b4c7da7-f986-4820-a6ec-64e093acb004","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:04:09][358141435197454][5463 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-25 14:04:09][358141435197454][5463 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-25 14:04:09][358141435197454][5463 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:04:11][356414818212139][1 ms][INFO] === Request start === [2025-08-25 14:04:11][356414818212139][1 ms][DEBUG] START check_scloud [2025-08-25 14:04:11][356414818212139][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:04:12][356414818212139][258 ms][DEBUG] SU: done in 256 ms; outu0_a118 29464 14587 24550964 206000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:04:12][356414818212139][258 ms][DEBUG] targetPkg: running [2025-08-25 14:04:12][356414818212139][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-25 14:04:12][356414818212139][258 ms][DEBUG] START check_boot_completed [2025-08-25 14:04:12][356414818212139][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:04:12][356414818212139][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:04:12][356414818212139][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:04:12][356414818212139][367 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:04:12][356414818212139][367 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:04:12][356414818212139][367 ms][DEBUG] START check_internet [2025-08-25 14:04:12][356414818212139][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:04:12][356414818212139][648 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.553/142.553/142.553/0.000 ms\n [2025-08-25 14:04:12][356414818212139][648 ms][DEBUG] check_internet: online [2025-08-25 14:04:12][356414818212139][648 ms][DEBUG] END check_internet in 281 ms [2025-08-25 14:04:12][356414818212139][648 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:04:12][356414818212139][648 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818212139\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5447\"}'\'' -e'"" [2025-08-25 14:04:12][356414818212139][648 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:04:12][356414818212139][649 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818212139\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5447\"}'\'' -e'"" [2025-08-25 14:04:16][356414818212139][4350 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d363f5e-7520-4436-8f2c-965a9f0b2526","id":"QR_8d363f5e-7520-4436-8f2c-965a9f0b2526","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:04:16][356414818212139][4506 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-25 14:04:16][356414818212139][4506 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 14:04:16][356414818212139][4506 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:06:05][352987744441116][0 ms][INFO] === Request start === [2025-08-25 14:06:05][352987744441116][1 ms][DEBUG] START check_scloud [2025-08-25 14:06:05][352987744441116][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:06:05][352987744441116][327 ms][DEBUG] SU: done in 327 ms; outu0_a118 29464 14587 24673012 216836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:06:05][352987744441116][328 ms][DEBUG] targetPkg: running [2025-08-25 14:06:05][352987744441116][328 ms][DEBUG] END check_scloud in 327 ms [2025-08-25 14:06:05][352987744441116][328 ms][DEBUG] START check_boot_completed [2025-08-25 14:06:05][352987744441116][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:06:05][352987744441116][374 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:06:05][352987744441116][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:06:05][352987744441116][421 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:06:05][352987744441116][421 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 14:06:05][352987744441116][421 ms][DEBUG] START check_internet [2025-08-25 14:06:05][352987744441116][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:06:06][352987744441116][905 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.461/201.461/201.461/0.000 ms\n [2025-08-25 14:06:06][352987744441116][906 ms][DEBUG] check_internet: online [2025-08-25 14:06:06][352987744441116][906 ms][DEBUG] END check_internet in 484 ms [2025-08-25 14:06:06][352987744441116][906 ms][DEBUG] rawBody.length=1158 [2025-08-25 14:06:06][352987744441116][906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352987744441116\",\"model\":\"SM-X900\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W5075CPF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5600\"}'\'' -e'"" [2025-08-25 14:06:06][352987744441116][906 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:06:06][352987744441116][906 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352987744441116\",\"model\":\"SM-X900\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W5075CPF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5600\"}'\'' -e'"" [2025-08-25 14:06:10][352987744441116][4748 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"NON_SAMSUNG_DEVICE"}\r\n [2025-08-25 14:06:10][352987744441116][4904 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=80 [2025-08-25 14:06:10][352987744441116][4904 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-08-25 14:06:10][352987744441116][4904 ms][INFO] SUCCESS response from frida (len=80) [2025-08-25 14:06:12][352617426206533][1 ms][INFO] === Request start === [2025-08-25 14:06:12][352617426206533][1 ms][DEBUG] START check_scloud [2025-08-25 14:06:12][352617426206533][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:06:12][352617426206533][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 29464 14587 24822900 228668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:06:12][352617426206533][255 ms][DEBUG] targetPkg: running [2025-08-25 14:06:12][352617426206533][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-25 14:06:12][352617426206533][256 ms][DEBUG] START check_boot_completed [2025-08-25 14:06:12][352617426206533][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:06:12][352617426206533][301 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 14:06:12][352617426206533][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:06:12][352617426206533][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:06:12][352617426206533][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:06:12][352617426206533][349 ms][DEBUG] START check_internet [2025-08-25 14:06:12][352617426206533][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:06:12][352617426206533][614 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=148 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 148.232/148.232/148.232/0.000 ms\n [2025-08-25 14:06:12][352617426206533][614 ms][DEBUG] check_internet: online [2025-08-25 14:06:12][352617426206533][614 ms][DEBUG] END check_internet in 265 ms [2025-08-25 14:06:12][352617426206533][614 ms][DEBUG] rawBody.length=1159 [2025-08-25 14:06:12][352617426206533][614 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352617426206533\",\"model\":\"SM-X900\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W5075CPF\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4116\"}'\'' -e'"" [2025-08-25 14:06:12][352617426206533][614 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:06:12][352617426206533][614 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352617426206533\",\"model\":\"SM-X900\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W5075CPF\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4116\"}'\'' -e'"" [2025-08-25 14:06:18][352617426206533][6190 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca971db0-509a-4150-9161-c230ffa9b08d","id":"QR_ca971db0-509a-4150-9161-c230ffa9b08d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:06:18][352617426206533][6347 ms][DEBUG] proc_open done in 5732 ms; code=255; res.len=3343 [2025-08-25 14:06:18][352617426206533][6347 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-08-25 14:06:18][352617426206533][6347 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:06:24][355968931490337][0 ms][INFO] === Request start === [2025-08-25 14:06:24][355968931490337][1 ms][DEBUG] START check_scloud [2025-08-25 14:06:24][355968931490337][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:06:25][355968931490337][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 29464 14587 24973692 240184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:06:25][355968931490337][312 ms][DEBUG] targetPkg: running [2025-08-25 14:06:25][355968931490337][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 14:06:25][355968931490337][312 ms][DEBUG] START check_boot_completed [2025-08-25 14:06:25][355968931490337][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:06:25][355968931490337][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:06:25][355968931490337][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:06:25][355968931490337][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:06:25][355968931490337][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 14:06:25][355968931490337][390 ms][DEBUG] START check_internet [2025-08-25 14:06:25][355968931490337][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:06:25][355968931490337][733 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.044/227.044/227.044/0.000 ms\n [2025-08-25 14:06:25][355968931490337][734 ms][DEBUG] check_internet: online [2025-08-25 14:06:25][355968931490337][734 ms][DEBUG] END check_internet in 344 ms [2025-08-25 14:06:25][355968931490337][734 ms][DEBUG] rawBody.length=1150 [2025-08-25 14:06:25][355968931490337][734 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355968931490337\",\"model\":\"SM-S546VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9539\"}'\'' -e'"" [2025-08-25 14:06:25][355968931490337][734 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:06:25][355968931490337][734 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355968931490337\",\"model\":\"SM-S546VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9539\"}'\'' -e'"" [2025-08-25 14:06:29][355968931490337][4701 ms][DEBUG] proc_open done in 3967 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 14:06:29][355968931490337][4701 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-08-25 14:06:29][355968931490337][4702 ms][WARN] Detected error: Process with pid 29464 either refused to load frida-agent, or terminated during injection [2025-08-25 14:06:29][355968931490337][4702 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 14:06:29][355968931490337][4857 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 14:06:29][355968931490337][4858 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 14:06:29][355968931490337][4858 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:06:29][355968931490337][4982 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 14:06:29][355968931490337][4982 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:06:30][355968931490337][5140 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 14:06:32][355968931490337][7154 ms][DEBUG] START check_boot_completed [2025-08-25 14:06:32][355968931490337][7154 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:06:32][355968931490337][7201 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:06:32][355968931490337][7201 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:06:32][355968931490337][7247 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:06:32][355968931490337][7247 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 14:06:35][355968931490337][10262 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 14:06:35][355968931490337][10262 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355968931490337\",\"model\":\"SM-S546VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9539\"}'\'' -e'"" [2025-08-25 14:06:41][355968931490337][16933 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88366ebe-568f-4374-a21b-15a1ae04cb10","id":"QR_88366ebe-568f-4374-a21b-15a1ae04cb10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:06:42][355968931490337][17089 ms][DEBUG] proc_open done in 6826 ms; code=255; res.len=3343 [2025-08-25 14:06:42][355968931490337][17089 ms][DEBUG] END runCmdUntilRes#2 in 6827 ms [2025-08-25 14:06:42][355968931490337][17089 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:07:03][352294621184244][0 ms][INFO] === Request start === [2025-08-25 14:07:03][352294621184244][1 ms][DEBUG] START check_scloud [2025-08-25 14:07:03][352294621184244][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:07:03][352294621184244][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 31059 14587 23557140 127460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:07:03][352294621184244][309 ms][DEBUG] targetPkg: running [2025-08-25 14:07:03][352294621184244][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 14:07:03][352294621184244][309 ms][DEBUG] START check_boot_completed [2025-08-25 14:07:03][352294621184244][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:07:03][352294621184244][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:07:03][352294621184244][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:07:03][352294621184244][404 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 14:07:03][352294621184244][404 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 14:07:03][352294621184244][404 ms][DEBUG] rawBody.length=1147 [2025-08-25 14:07:03][352294621184244][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294621184244\",\"model\":\"SM-P619\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DBT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7822\"}'\'' -e'"" [2025-08-25 14:07:03][352294621184244][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:07:03][352294621184244][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294621184244\",\"model\":\"SM-P619\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DBT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7822\"}'\'' -e'"" [2025-08-25 14:07:07][352294621184244][4261 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0160974-1d43-4fa4-8bb2-c7dcf2b66d78","id":"QR_c0160974-1d43-4fa4-8bb2-c7dcf2b66d78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:07:07][352294621184244][4417 ms][DEBUG] proc_open done in 4013 ms; code=255; res.len=3343 [2025-08-25 14:07:07][352294621184244][4417 ms][DEBUG] END runCmdUntilRes#1 in 4013 ms [2025-08-25 14:07:07][352294621184244][4417 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:08:03][352288963672691][0 ms][INFO] === Request start === [2025-08-25 14:08:03][352288963672691][1 ms][DEBUG] START check_scloud [2025-08-25 14:08:03][352288963672691][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:08:04][352288963672691][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 31059 14587 23681080 138012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:08:04][352288963672691][312 ms][DEBUG] targetPkg: running [2025-08-25 14:08:04][352288963672691][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 14:08:04][352288963672691][312 ms][DEBUG] START check_boot_completed [2025-08-25 14:08:04][352288963672691][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:08:04][352288963672691][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:08:04][352288963672691][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:08:04][352288963672691][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:08:04][352288963672691][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 14:08:04][352288963672691][390 ms][DEBUG] START check_internet [2025-08-25 14:08:04][352288963672691][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:08:04][352288963672691][749 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.741/249.741/249.741/0.000 ms\n [2025-08-25 14:08:04][352288963672691][749 ms][DEBUG] check_internet: online [2025-08-25 14:08:04][352288963672691][749 ms][DEBUG] END check_internet in 360 ms [2025-08-25 14:08:04][352288963672691][749 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:08:04][352288963672691][750 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963672691\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6532\"}'\'' -e'"" [2025-08-25 14:08:04][352288963672691][750 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:08:04][352288963672691][750 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963672691\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6532\"}'\'' -e'"" [2025-08-25 14:08:08][352288963672691][4670 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78160797-5709-49df-a6ed-ee05057337b5","id":"QR_78160797-5709-49df-a6ed-ee05057337b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:08:08][352288963672691][4826 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-25 14:08:08][352288963672691][4826 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-25 14:08:08][352288963672691][4826 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:08:11][356769545323073][0 ms][INFO] === Request start === [2025-08-25 14:08:11][356769545323073][1 ms][DEBUG] START check_scloud [2025-08-25 14:08:11][356769545323073][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:08:11][356769545323073][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 31059 14587 23857472 149900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:08:11][356769545323073][274 ms][DEBUG] targetPkg: running [2025-08-25 14:08:11][356769545323073][274 ms][DEBUG] END check_scloud in 273 ms [2025-08-25 14:08:11][356769545323073][274 ms][DEBUG] START check_boot_completed [2025-08-25 14:08:11][356769545323073][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:08:11][356769545323073][321 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:08:11][356769545323073][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:08:11][356769545323073][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:08:11][356769545323073][367 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:08:11][356769545323073][367 ms][DEBUG] START check_internet [2025-08-25 14:08:11][356769545323073][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:08:11][356769545323073][633 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=148 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 148.657/148.657/148.657/0.000 ms\n [2025-08-25 14:08:11][356769545323073][633 ms][DEBUG] check_internet: online [2025-08-25 14:08:11][356769545323073][633 ms][DEBUG] END check_internet in 266 ms [2025-08-25 14:08:11][356769545323073][633 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:08:11][356769545323073][633 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545323073\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4109\"}'\'' -e'"" [2025-08-25 14:08:11][356769545323073][633 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:08:11][356769545323073][633 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545323073\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4109\"}'\'' -e'"" [2025-08-25 14:08:15][356769545323073][4148 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 14:08:15][356769545323073][4304 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=115 [2025-08-25 14:08:15][356769545323073][4304 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-25 14:08:15][356769545323073][4304 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 14:08:15][][1 ms][INFO] === Request start === [2025-08-25 14:08:15][][1 ms][DEBUG] START check_scloud [2025-08-25 14:08:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:08:16][][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 31059 14587 23999944 160764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:08:16][][296 ms][DEBUG] targetPkg: running [2025-08-25 14:08:16][][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-25 14:08:16][][296 ms][DEBUG] START check_boot_completed [2025-08-25 14:08:16][][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:08:16][][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:08:16][][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:08:16][][391 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 14:08:16][][391 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 14:08:16][][391 ms][DEBUG] START check_internet [2025-08-25 14:08:16][][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:08:16][][639 ms][DEBUG] SU: done in 248 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.820/144.820/144.820/0.000 ms\n [2025-08-25 14:08:16][][639 ms][DEBUG] check_internet: online [2025-08-25 14:08:16][][639 ms][DEBUG] END check_internet in 248 ms [2025-08-25 14:08:16][][639 ms][DEBUG] rawBody.length=1129 [2025-08-25 14:08:16][][639 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W406Z3JX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7611\"}'\'' -e'"" [2025-08-25 14:08:16][][639 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:08:16][][639 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W406Z3JX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7611\"}'\'' -e'"" [2025-08-25 14:08:19][][4013 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 14:08:19][][4169 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=107 [2025-08-25 14:08:19][][4169 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-08-25 14:08:19][][4169 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 14:08:21][356769545323073][0 ms][INFO] === Request start === [2025-08-25 14:08:21][356769545323073][1 ms][DEBUG] START check_scloud [2025-08-25 14:08:21][356769545323073][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:08:22][356769545323073][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 31059 14587 24128208 172684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:08:22][356769545323073][308 ms][DEBUG] targetPkg: running [2025-08-25 14:08:22][356769545323073][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 14:08:22][356769545323073][308 ms][DEBUG] START check_boot_completed [2025-08-25 14:08:22][356769545323073][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:08:22][356769545323073][353 ms][DEBUG] ADB: done in 44 ms; out [2025-08-25 14:08:22][356769545323073][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:08:22][356769545323073][401 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 14:08:22][356769545323073][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:08:22][356769545323073][401 ms][DEBUG] START check_internet [2025-08-25 14:08:22][356769545323073][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:08:22][356769545323073][697 ms][DEBUG] SU: done in 295 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.300/151.300/151.300/0.000 ms\n [2025-08-25 14:08:22][356769545323073][697 ms][DEBUG] check_internet: online [2025-08-25 14:08:22][356769545323073][697 ms][DEBUG] END check_internet in 296 ms [2025-08-25 14:08:22][356769545323073][697 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:08:22][356769545323073][697 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545323073\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7917\"}'\'' -e'"" [2025-08-25 14:08:22][356769545323073][697 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:08:22][356769545323073][697 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545323073\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7917\"}'\'' -e'"" [2025-08-25 14:08:27][356769545323073][5773 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f575852f-b9b5-445d-9c37-2af416200b6d","id":"QR_f575852f-b9b5-445d-9c37-2af416200b6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:08:27][356769545323073][5929 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=3343 [2025-08-25 14:08:27][356769545323073][5930 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-08-25 14:08:27][356769545323073][5930 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:09:04][350547661982211][0 ms][INFO] === Request start === [2025-08-25 14:09:04][350547661982211][1 ms][DEBUG] START check_scloud [2025-08-25 14:09:04][350547661982211][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:09:04][350547661982211][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 31059 14587 24213144 183456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:09:04][350547661982211][294 ms][DEBUG] targetPkg: running [2025-08-25 14:09:04][350547661982211][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-25 14:09:04][350547661982211][294 ms][DEBUG] START check_boot_completed [2025-08-25 14:09:04][350547661982211][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:09:04][350547661982211][340 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:09:04][350547661982211][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:09:04][350547661982211][403 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 14:09:04][350547661982211][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:09:04][350547661982211][403 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:09:04][350547661982211][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547661982211\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2716\"}'\'' -e'"" [2025-08-25 14:09:04][350547661982211][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:09:04][350547661982211][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547661982211\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2716\"}'\'' -e'"" [2025-08-25 14:09:10][350547661982211][6011 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9903bf53-d296-4e0e-8ab3-7665dcbea0ba","id":"QR_9903bf53-d296-4e0e-8ab3-7665dcbea0ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:09:10][350547661982211][6167 ms][DEBUG] proc_open done in 5763 ms; code=255; res.len=3343 [2025-08-25 14:09:10][350547661982211][6167 ms][DEBUG] END runCmdUntilRes#1 in 5764 ms [2025-08-25 14:09:10][350547661982211][6167 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:09:15][355355257924422][0 ms][INFO] === Request start === [2025-08-25 14:09:15][355355257924422][1 ms][DEBUG] START check_scloud [2025-08-25 14:09:15][355355257924422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:09:15][355355257924422][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 31059 14587 24333216 195288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:09:15][355355257924422][311 ms][DEBUG] targetPkg: running [2025-08-25 14:09:15][355355257924422][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 14:09:15][355355257924422][311 ms][DEBUG] START check_boot_completed [2025-08-25 14:09:15][355355257924422][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:09:15][355355257924422][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:09:15][355355257924422][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:09:15][355355257924422][407 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 14:09:15][355355257924422][407 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 14:09:15][355355257924422][407 ms][DEBUG] rawBody.length=1147 [2025-08-25 14:09:15][355355257924422][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924422\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7255\"}'\'' -e'"" [2025-08-25 14:09:15][355355257924422][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:09:15][355355257924422][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924422\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7255\"}'\'' -e'"" [2025-08-25 14:09:19][355355257924422][4185 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 14:09:19][355355257924422][4341 ms][DEBUG] proc_open done in 3934 ms; code=255; res.len=115 [2025-08-25 14:09:19][355355257924422][4341 ms][DEBUG] END runCmdUntilRes#1 in 3934 ms [2025-08-25 14:09:19][355355257924422][4341 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 14:09:19][][0 ms][INFO] === Request start === [2025-08-25 14:09:19][][1 ms][DEBUG] START check_scloud [2025-08-25 14:09:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:09:20][][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 31059 14587 24463528 207112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:09:20][][298 ms][DEBUG] targetPkg: running [2025-08-25 14:09:20][][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 14:09:20][][298 ms][DEBUG] START check_boot_completed [2025-08-25 14:09:20][][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:09:20][][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:09:20][][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:09:20][][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:09:20][][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:09:20][][407 ms][DEBUG] rawBody.length=1128 [2025-08-25 14:09:20][][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTC049F8M\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9107\"}'\'' -e'"" [2025-08-25 14:09:20][][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:09:20][][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTC049F8M\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9107\"}'\'' -e'"" [2025-08-25 14:09:23][][3781 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 14:09:23][][3937 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=107 [2025-08-25 14:09:23][][3937 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-08-25 14:09:23][][3937 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 14:09:25][355355257924422][0 ms][INFO] === Request start === [2025-08-25 14:09:25][355355257924422][1 ms][DEBUG] START check_scloud [2025-08-25 14:09:25][355355257924422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:09:25][355355257924422][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 31059 14587 24604044 218136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:09:25][355355257924422][300 ms][DEBUG] targetPkg: running [2025-08-25 14:09:25][355355257924422][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 14:09:25][355355257924422][300 ms][DEBUG] START check_boot_completed [2025-08-25 14:09:25][355355257924422][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:09:25][355355257924422][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:09:25][355355257924422][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:09:26][355355257924422][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:09:26][355355257924422][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 14:09:26][355355257924422][378 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:09:26][355355257924422][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924422\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9591\"}'\'' -e'"" [2025-08-25 14:09:26][355355257924422][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:09:26][355355257924422][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924422\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9591\"}'\'' -e'"" [2025-08-25 14:09:31][355355257924422][5486 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43364a30-eed6-4920-8593-14b05d557a57","id":"QR_43364a30-eed6-4920-8593-14b05d557a57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:09:31][355355257924422][5643 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-08-25 14:09:31][355355257924422][5643 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-08-25 14:09:31][355355257924422][5643 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:10:03][353243888446753][0 ms][INFO] === Request start === [2025-08-25 14:10:03][353243888446753][1 ms][DEBUG] START check_scloud [2025-08-25 14:10:03][353243888446753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:10:04][353243888446753][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 31059 14587 24678824 229368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:10:04][353243888446753][267 ms][DEBUG] targetPkg: running [2025-08-25 14:10:04][353243888446753][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-25 14:10:04][353243888446753][267 ms][DEBUG] START check_boot_completed [2025-08-25 14:10:04][353243888446753][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:10:04][353243888446753][314 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:10:04][353243888446753][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:10:04][353243888446753][407 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 14:10:04][353243888446753][407 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 14:10:04][353243888446753][407 ms][DEBUG] START check_internet [2025-08-25 14:10:04][353243888446753][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:10:04][353243888446753][891 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.216/201.216/201.216/0.000 ms\n [2025-08-25 14:10:04][353243888446753][891 ms][DEBUG] check_internet: online [2025-08-25 14:10:04][353243888446753][891 ms][DEBUG] END check_internet in 484 ms [2025-08-25 14:10:04][353243888446753][891 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:10:04][353243888446753][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243888446753\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5848\"}'\'' -e'"" [2025-08-25 14:10:04][353243888446753][891 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:10:04][353243888446753][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243888446753\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5848\"}'\'' -e'"" [2025-08-25 14:10:08][353243888446753][4937 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_997501dc-1939-46a7-a8db-fa3f8861d761","id":"QR_997501dc-1939-46a7-a8db-fa3f8861d761","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:10:08][353243888446753][5093 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-25 14:10:08][353243888446753][5094 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 14:10:08][353243888446753][5094 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:12:02][356350641633341][1 ms][INFO] === Request start === [2025-08-25 14:12:02][356350641633341][1 ms][DEBUG] START check_scloud [2025-08-25 14:12:02][356350641633341][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:12:02][356350641633341][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 31059 14587 24798860 241008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:12:02][356350641633341][307 ms][DEBUG] targetPkg: running [2025-08-25 14:12:02][356350641633341][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 14:12:02][356350641633341][307 ms][DEBUG] START check_boot_completed [2025-08-25 14:12:02][356350641633341][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:12:03][356350641633341][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:12:03][356350641633341][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:12:03][356350641633341][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:12:03][356350641633341][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:12:03][356350641633341][416 ms][DEBUG] START check_internet [2025-08-25 14:12:03][356350641633341][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:12:03][356350641633341][713 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.676/200.676/200.676/0.000 ms\n [2025-08-25 14:12:03][356350641633341][713 ms][DEBUG] check_internet: online [2025-08-25 14:12:03][356350641633341][713 ms][DEBUG] END check_internet in 297 ms [2025-08-25 14:12:03][356350641633341][713 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:12:03][356350641633341][713 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641633341\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9284\"}'\'' -e'"" [2025-08-25 14:12:03][356350641633341][713 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:12:03][356350641633341][714 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641633341\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9284\"}'\'' -e'"" [2025-08-25 14:12:11][356350641633341][8461 ms][DEBUG] proc_open done in 7748 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 14:12:11][356350641633341][8461 ms][DEBUG] END runCmdUntilRes#1 in 7748 ms [2025-08-25 14:12:11][356350641633341][8461 ms][WARN] Detected error: Process with pid 31059 either refused to load frida-agent, or terminated during injection [2025-08-25 14:12:11][356350641633341][8461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 14:12:11][356350641633341][8664 ms][DEBUG] SU: done in 203 ms; out [2025-08-25 14:12:11][356350641633341][8664 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 14:12:11][356350641633341][8664 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:12:11][356350641633341][9039 ms][DEBUG] SU: done in 375 ms; out [2025-08-25 14:12:11][356350641633341][9039 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:12:12][356350641633341][9462 ms][DEBUG] SU: done in 422 ms; out [2025-08-25 14:12:14][356350641633341][11476 ms][DEBUG] START check_boot_completed [2025-08-25 14:12:14][356350641633341][11476 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:12:14][356350641633341][11507 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:12:14][356350641633341][11507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:12:14][356350641633341][11554 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:12:14][356350641633341][11554 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 14:12:17][356350641633341][14569 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 14:12:17][356350641633341][14569 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641633341\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9284\"}'\'' -e'"" [2025-08-25 14:12:18][356350641633341][16241 ms][DEBUG] proc_open done in 1672 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-25 14:12:18][356350641633341][16241 ms][DEBUG] END runCmdUntilRes#2 in 1672 ms [2025-08-25 14:12:18][356350641633341][16241 ms][WARN] Detected error 2; Reboot the device [2025-08-25 14:12:18][356350641633341][16241 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 14:12:19][356350641633341][16912 ms][DEBUG] SU: done in 671 ms; out [2025-08-25 14:13:02][356350641633341][0 ms][INFO] === Request start === [2025-08-25 14:13:02][356350641633341][1 ms][DEBUG] START check_scloud [2025-08-25 14:13:02][356350641633341][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:13:02][356350641633341][39 ms][DEBUG] SU: done in 38 ms; out [2025-08-25 14:13:02][356350641633341][39 ms][WARN] targetPkg: not running, restarting [2025-08-25 14:13:02][356350641633341][39 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:13:02][356350641633341][70 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 14:13:02][356350641633341][70 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:13:03][356350641633341][102 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 14:13:05][356350641633341][2117 ms][DEBUG] END check_scloud in 2116 ms [2025-08-25 14:13:05][356350641633341][2117 ms][DEBUG] START check_boot_completed [2025-08-25 14:13:05][356350641633341][2117 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:13:20][356350641633341][17383 ms][DEBUG] ADB: done in 15266 ms; out [2025-08-25 14:13:20][356350641633341][17383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:13:20][356350641633341][17477 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 14:13:20][356350641633341][17477 ms][DEBUG] END check_boot_completed in 15360 ms [2025-08-25 14:13:20][356350641633341][17477 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:13:20][356350641633341][17477 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641633341\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9351\"}'\'' -e'"" [2025-08-25 14:13:20][356350641633341][17477 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:13:20][356350641633341][17477 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641633341\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9351\"}'\'' -e'"" [2025-08-25 14:13:23][356350641633341][20710 ms][DEBUG] proc_open done in 3234 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-25 14:13:23][356350641633341][20710 ms][DEBUG] END runCmdUntilRes#1 in 3234 ms [2025-08-25 14:13:23][356350641633341][20711 ms][WARN] Detected error: Process not found [2025-08-25 14:13:23][356350641633341][20711 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 14:13:23][356350641633341][20836 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 14:13:23][356350641633341][20836 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 14:13:23][356350641633341][20836 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:13:23][356350641633341][20976 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 14:13:23][356350641633341][20976 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:13:24][356350641633341][21242 ms][DEBUG] SU: done in 265 ms; out [2025-08-25 14:13:26][356350641633341][23252 ms][DEBUG] START check_boot_completed [2025-08-25 14:13:26][356350641633341][23252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:13:26][356350641633341][23299 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:13:26][356350641633341][23299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:13:26][356350641633341][23361 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:13:26][356350641633341][23361 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:13:29][356350641633341][26376 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 14:13:29][356350641633341][26376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641633341\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9351\"}'\'' -e'"" [2025-08-25 14:13:33][356350641633341][31000 ms][DEBUG] proc_open done in 4624 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-25 14:13:33][356350641633341][31000 ms][DEBUG] END runCmdUntilRes#2 in 4624 ms [2025-08-25 14:13:33][356350641633341][31000 ms][WARN] Detected error 2; Reboot the device [2025-08-25 14:13:33][356350641633341][31000 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 14:13:37][356350641633341][34827 ms][DEBUG] SU: done in 3827 ms; out [2025-08-25 14:14:02][356350641633341][0 ms][INFO] === Request start === [2025-08-25 14:14:02][356350641633341][1 ms][DEBUG] START check_scloud [2025-08-25 14:14:02][356350641633341][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:14:02][356350641633341][42 ms][DEBUG] SU: done in 41 ms; out [2025-08-25 14:14:02][356350641633341][42 ms][WARN] targetPkg: not running, restarting [2025-08-25 14:14:02][356350641633341][42 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:14:02][356350641633341][73 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 14:14:02][356350641633341][73 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:14:02][356350641633341][104 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 14:14:05][356350641633341][2120 ms][DEBUG] END check_scloud in 2119 ms [2025-08-25 14:14:05][356350641633341][2120 ms][DEBUG] START check_boot_completed [2025-08-25 14:14:05][356350641633341][2120 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:14:34][356350641633341][31596 ms][DEBUG] ADB: done in 29476 ms; out [2025-08-25 14:14:34][356350641633341][31596 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:14:34][356350641633341][31674 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 14:14:34][356350641633341][31674 ms][DEBUG] END check_boot_completed in 29555 ms [2025-08-25 14:14:34][356350641633341][31674 ms][DEBUG] START check_internet [2025-08-25 14:14:34][356350641633341][31675 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:14:34][356350641633341][31893 ms][DEBUG] SU: done in 218 ms; out [2025-08-25 14:14:34][356350641633341][31893 ms][WARN] check_internet: offline [2025-08-25 14:14:34][356350641633341][31893 ms][DEBUG] END check_internet in 218 ms [2025-08-25 14:15:03][356350641633341][1 ms][INFO] === Request start === [2025-08-25 14:15:03][356350641633341][1 ms][DEBUG] START check_scloud [2025-08-25 14:15:03][356350641633341][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:15:04][356350641633341][353 ms][DEBUG] SU: done in 352 ms; out [2025-08-25 14:15:04][356350641633341][353 ms][WARN] targetPkg: not running, restarting [2025-08-25 14:15:04][356350641633341][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:15:04][356350641633341][494 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 14:15:04][356350641633341][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:15:04][356350641633341][728 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 14:15:06][356350641633341][2743 ms][DEBUG] END check_scloud in 2742 ms [2025-08-25 14:15:06][356350641633341][2743 ms][DEBUG] START check_boot_completed [2025-08-25 14:15:06][356350641633341][2743 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:15:06][356350641633341][2790 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:15:06][356350641633341][2790 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:15:06][356350641633341][2853 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 14:15:06][356350641633341][2853 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 14:15:06][356350641633341][2853 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:15:06][356350641633341][2853 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641633341\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2059\"}'\'' -e'"" [2025-08-25 14:15:06][356350641633341][2854 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:15:06][356350641633341][2854 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356350641633341\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2059\"}'\'' -e'"" [2025-08-25 14:15:12][356350641633341][9257 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_747d342e-6528-4af2-8ebf-58e2b294fb29","id":"QR_747d342e-6528-4af2-8ebf-58e2b294fb29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:15:13][356350641633341][9413 ms][DEBUG] proc_open done in 6559 ms; code=255; res.len=3343 [2025-08-25 14:15:13][356350641633341][9413 ms][DEBUG] END runCmdUntilRes#1 in 6560 ms [2025-08-25 14:15:13][356350641633341][9413 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:15:16][355422421513737][0 ms][INFO] === Request start === [2025-08-25 14:15:16][355422421513737][1 ms][DEBUG] START check_scloud [2025-08-25 14:15:16][355422421513737][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:15:17][355422421513737][336 ms][DEBUG] SU: done in 335 ms; outu0_a118 10500 4970 23729276 115008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:15:17][355422421513737][336 ms][DEBUG] targetPkg: running [2025-08-25 14:15:17][355422421513737][336 ms][DEBUG] END check_scloud in 335 ms [2025-08-25 14:15:17][355422421513737][336 ms][DEBUG] START check_boot_completed [2025-08-25 14:15:17][355422421513737][336 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:15:17][355422421513737][382 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:15:17][355422421513737][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:15:17][355422421513737][429 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:15:17][355422421513737][429 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:15:17][355422421513737][429 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:15:17][355422421513737][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355422421513737\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8591\"}'\'' -e'"" [2025-08-25 14:15:17][355422421513737][429 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:15:17][355422421513737][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355422421513737\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8591\"}'\'' -e'"" [2025-08-25 14:15:17][355422421513737][929 ms][DEBUG] proc_open done in 500 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-25 14:15:17][355422421513737][929 ms][DEBUG] END runCmdUntilRes#1 in 500 ms [2025-08-25 14:15:17][355422421513737][929 ms][WARN] Detected system_server; Reboot the device [2025-08-25 14:15:17][355422421513737][929 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 14:15:19][355422421513737][2429 ms][DEBUG] SU: done in 1499 ms; out [2025-08-25 14:15:33][356608130263734][0 ms][INFO] === Request start === [2025-08-25 14:15:33][356608130263734][1 ms][DEBUG] START check_scloud [2025-08-25 14:15:33][356608130263734][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:15:33][356608130263734][40 ms][DEBUG] SU: done in 39 ms; out [2025-08-25 14:15:33][356608130263734][40 ms][WARN] targetPkg: not running, restarting [2025-08-25 14:15:33][356608130263734][40 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:15:33][356608130263734][71 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 14:15:33][356608130263734][71 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:15:33][356608130263734][102 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 14:15:35][356608130263734][2117 ms][DEBUG] END check_scloud in 2117 ms [2025-08-25 14:15:35][356608130263734][2117 ms][DEBUG] START check_boot_completed [2025-08-25 14:15:35][356608130263734][2117 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:16:04][355422421513737][1 ms][INFO] === Request start === [2025-08-25 14:16:04][355422421513737][1 ms][DEBUG] START check_scloud [2025-08-25 14:16:04][355422421513737][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:16:04][355422421513737][32 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 14:16:04][355422421513737][32 ms][WARN] targetPkg: not running, restarting [2025-08-25 14:16:04][355422421513737][32 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:16:04][355422421513737][63 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 14:16:04][355422421513737][63 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:16:04][355422421513737][94 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 14:16:06][355422421513737][2110 ms][DEBUG] END check_scloud in 2108 ms [2025-08-25 14:16:06][355422421513737][2110 ms][DEBUG] START check_boot_completed [2025-08-25 14:16:06][355422421513737][2110 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:16:18][355422421513737][14330 ms][DEBUG] ADB: done in 12220 ms; out [2025-08-25 14:16:18][355422421513737][14330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:16:18][355422421513737][14392 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:16:18][355422421513737][14392 ms][DEBUG] END check_boot_completed in 12283 ms [2025-08-25 14:16:18][355422421513737][14392 ms][DEBUG] START check_internet [2025-08-25 14:16:18][355422421513737][14392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:16:19][355422421513737][14502 ms][DEBUG] SU: done in 110 ms; out [2025-08-25 14:16:19][355422421513737][14502 ms][WARN] check_internet: offline [2025-08-25 14:16:19][355422421513737][14502 ms][DEBUG] END check_internet in 110 ms [2025-08-25 14:16:22][356608130263734][0 ms][INFO] === Request start === [2025-08-25 14:16:22][356608130263734][1 ms][DEBUG] START check_scloud [2025-08-25 14:16:22][356608130263734][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:16:23][356608130263734][309 ms][DEBUG] SU: done in 308 ms; out [2025-08-25 14:16:23][356608130263734][309 ms][WARN] targetPkg: not running, restarting [2025-08-25 14:16:23][356608130263734][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:16:23][356608130263734][449 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 14:16:23][356608130263734][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:16:23][356608130263734][700 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 14:16:25][356608130263734][2714 ms][DEBUG] END check_scloud in 2714 ms [2025-08-25 14:16:25][356608130263734][2714 ms][DEBUG] START check_boot_completed [2025-08-25 14:16:25][356608130263734][2714 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:16:25][356608130263734][2761 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:16:25][356608130263734][2761 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:16:25][356608130263734][2839 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 14:16:25][356608130263734][2840 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 14:16:25][356608130263734][2840 ms][DEBUG] START check_internet [2025-08-25 14:16:25][356608130263734][2840 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:16:26][356608130263734][3402 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.746/136.746/136.746/0.000 ms\n [2025-08-25 14:16:26][356608130263734][3402 ms][DEBUG] check_internet: online [2025-08-25 14:16:26][356608130263734][3402 ms][DEBUG] END check_internet in 562 ms [2025-08-25 14:16:26][356608130263734][3402 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:16:26][356608130263734][3402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356608130263734\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6066\"}'\'' -e'"" [2025-08-25 14:16:26][356608130263734][3402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:16:26][356608130263734][3402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356608130263734\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6066\"}'\'' -e'"" [2025-08-25 14:16:37][356608130263734][14431 ms][DEBUG] proc_open done in 11028 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-25 14:16:37][356608130263734][14431 ms][DEBUG] END runCmdUntilRes#1 in 11028 ms [2025-08-25 14:16:37][356608130263734][14431 ms][WARN] Detected error: Process not found [2025-08-25 14:16:37][356608130263734][14431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 14:16:37][356608130263734][14665 ms][DEBUG] SU: done in 234 ms; out [2025-08-25 14:16:37][356608130263734][14665 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 14:16:37][356608130263734][14665 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:16:37][356608130263734][14883 ms][DEBUG] SU: done in 219 ms; out [2025-08-25 14:16:37][356608130263734][14884 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:16:38][356608130263734][15134 ms][DEBUG] SU: done in 251 ms; out [2025-08-25 14:16:40][356608130263734][17148 ms][DEBUG] START check_boot_completed [2025-08-25 14:16:40][356608130263734][17148 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:16:40][356608130263734][17195 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:16:40][356608130263734][17195 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:16:40][356608130263734][17242 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:16:40][356608130263734][17242 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 14:16:43][356608130263734][20257 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 14:16:43][356608130263734][20257 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356608130263734\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6066\"}'\'' -e'"" [2025-08-25 14:16:44][356608130263734][21679 ms][DEBUG] proc_open done in 1422 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-25 14:16:44][356608130263734][21679 ms][DEBUG] END runCmdUntilRes#2 in 1422 ms [2025-08-25 14:16:44][356608130263734][21679 ms][WARN] Detected error 2; Reboot the device [2025-08-25 14:16:44][356608130263734][21679 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 14:16:48][356608130263734][25131 ms][DEBUG] SU: done in 3452 ms; out [2025-08-25 14:17:05][355422421513737][1 ms][INFO] === Request start === [2025-08-25 14:17:05][355422421513737][1 ms][DEBUG] START check_scloud [2025-08-25 14:17:05][355422421513737][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:17:05][355422421513737][38 ms][DEBUG] SU: done in 37 ms; out [2025-08-25 14:17:05][355422421513737][38 ms][WARN] targetPkg: not running, restarting [2025-08-25 14:17:05][355422421513737][38 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:17:05][355422421513737][69 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 14:17:05][355422421513737][69 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:17:05][355422421513737][100 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 14:17:07][355422421513737][2115 ms][DEBUG] END check_scloud in 2114 ms [2025-08-25 14:17:07][355422421513737][2115 ms][DEBUG] START check_boot_completed [2025-08-25 14:17:07][355422421513737][2115 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:17:44][355422421513737][39718 ms][DEBUG] ADB: done in 37602 ms; out [2025-08-25 14:17:44][355422421513737][39718 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:17:44][355422421513737][39812 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 14:17:44][355422421513737][39812 ms][DEBUG] END check_boot_completed in 37696 ms [2025-08-25 14:17:44][355422421513737][39812 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:17:44][355422421513737][39812 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355422421513737\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1118\"}'\'' -e'"" [2025-08-25 14:17:44][355422421513737][39812 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:17:44][355422421513737][39812 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355422421513737\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1118\"}'\'' -e'"" [2025-08-25 14:18:05][355422421513737][1 ms][INFO] === Request start === [2025-08-25 14:18:05][355422421513737][1 ms][DEBUG] START check_scloud [2025-08-25 14:18:05][355422421513737][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:18:05][355422421513737][362 ms][DEBUG] SU: done in 361 ms; out [2025-08-25 14:18:05][355422421513737][362 ms][WARN] targetPkg: not running, restarting [2025-08-25 14:18:05][355422421513737][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:18:05][355422421513737][549 ms][DEBUG] SU: done in 187 ms; out [2025-08-25 14:18:05][355422421513737][550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:18:06][355422421513737][815 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 14:18:08][355422421513737][2830 ms][DEBUG] END check_scloud in 2829 ms [2025-08-25 14:18:08][355422421513737][2830 ms][DEBUG] START check_boot_completed [2025-08-25 14:18:08][355422421513737][2830 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:18:08][355422421513737][2877 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:18:08][355422421513737][2877 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:18:08][355422421513737][2940 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:18:08][355422421513737][2940 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 14:18:08][355422421513737][2940 ms][DEBUG] START check_internet [2025-08-25 14:18:08][355422421513737][2940 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:18:08][355422421513737][3549 ms][DEBUG] SU: done in 609 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.130/257.130/257.130/0.000 ms\n [2025-08-25 14:18:08][355422421513737][3549 ms][DEBUG] check_internet: online [2025-08-25 14:18:08][355422421513737][3549 ms][DEBUG] END check_internet in 609 ms [2025-08-25 14:18:08][355422421513737][3549 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:18:08][355422421513737][3549 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355422421513737\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5838\"}'\'' -e'"" [2025-08-25 14:18:08][355422421513737][3549 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:18:08][355422421513737][3549 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355422421513737\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5838\"}'\'' -e'"" [2025-08-25 14:18:16][355422421513737][11609 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0557240c-7c51-45a1-ac75-d1a488104a38","id":"QR_0557240c-7c51-45a1-ac75-d1a488104a38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:18:17][355422421513737][11765 ms][DEBUG] proc_open done in 8217 ms; code=255; res.len=3343 [2025-08-25 14:18:17][355422421513737][11766 ms][DEBUG] END runCmdUntilRes#1 in 8217 ms [2025-08-25 14:18:17][355422421513737][11766 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:18:21][356608130263734][0 ms][INFO] === Request start === [2025-08-25 14:18:21][356608130263734][1 ms][DEBUG] START check_scloud [2025-08-25 14:18:21][356608130263734][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:18:22][356608130263734][339 ms][DEBUG] SU: done in 338 ms; outu0_a118 9504 5013 23848948 89296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:18:22][356608130263734][339 ms][DEBUG] targetPkg: running [2025-08-25 14:18:22][356608130263734][339 ms][DEBUG] END check_scloud in 338 ms [2025-08-25 14:18:22][356608130263734][339 ms][DEBUG] START check_boot_completed [2025-08-25 14:18:22][356608130263734][339 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:18:22][356608130263734][386 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:18:22][356608130263734][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:18:22][356608130263734][448 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:18:22][356608130263734][448 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:18:22][356608130263734][448 ms][DEBUG] START check_internet [2025-08-25 14:18:22][356608130263734][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:18:22][356608130263734][761 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.768/194.768/194.768/0.000 ms\n [2025-08-25 14:18:22][356608130263734][761 ms][DEBUG] check_internet: online [2025-08-25 14:18:22][356608130263734][761 ms][DEBUG] END check_internet in 312 ms [2025-08-25 14:18:22][356608130263734][761 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:18:22][356608130263734][761 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356608130263734\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6604\"}'\'' -e'"" [2025-08-25 14:18:22][356608130263734][761 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:18:22][356608130263734][761 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356608130263734\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6604\"}'\'' -e'"" [2025-08-25 14:18:29][356608130263734][7228 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f2c181f-db78-44a7-8d24-27c627538660","id":"QR_6f2c181f-db78-44a7-8d24-27c627538660","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:18:29][356608130263734][7384 ms][DEBUG] proc_open done in 6622 ms; code=255; res.len=3343 [2025-08-25 14:18:29][356608130263734][7384 ms][DEBUG] END runCmdUntilRes#1 in 6623 ms [2025-08-25 14:18:29][356608130263734][7384 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:18:31][357674438074313][0 ms][INFO] === Request start === [2025-08-25 14:18:31][357674438074313][1 ms][DEBUG] START check_scloud [2025-08-25 14:18:31][357674438074313][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:18:32][357674438074313][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 9504 5013 24031496 90156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:18:32][357674438074313][326 ms][DEBUG] targetPkg: running [2025-08-25 14:18:32][357674438074313][326 ms][DEBUG] END check_scloud in 325 ms [2025-08-25 14:18:32][357674438074313][326 ms][DEBUG] START check_boot_completed [2025-08-25 14:18:32][357674438074313][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:18:32][357674438074313][372 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:18:32][357674438074313][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:18:32][357674438074313][435 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 14:18:32][357674438074313][435 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:18:32][357674438074313][435 ms][DEBUG] START check_internet [2025-08-25 14:18:32][357674438074313][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:18:32][357674438074313][700 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.921/140.921/140.921/0.000 ms\n [2025-08-25 14:18:32][357674438074313][701 ms][DEBUG] check_internet: online [2025-08-25 14:18:32][357674438074313][701 ms][DEBUG] END check_internet in 266 ms [2025-08-25 14:18:32][357674438074313][701 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:18:32][357674438074313][701 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438074313\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1435\"}'\'' -e'"" [2025-08-25 14:18:32][357674438074313][701 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:18:32][357674438074313][701 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438074313\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1435\"}'\'' -e'"" [2025-08-25 14:18:37][357674438074313][5324 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d82ca47d-bc50-493f-8b9c-b906410c2610","id":"QR_d82ca47d-bc50-493f-8b9c-b906410c2610","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:18:37][357674438074313][5480 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-08-25 14:18:37][357674438074313][5480 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-08-25 14:18:37][357674438074313][5480 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:19:03][356414819716690][0 ms][INFO] === Request start === [2025-08-25 14:19:03][356414819716690][1 ms][DEBUG] START check_scloud [2025-08-25 14:19:03][356414819716690][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:19:03][356414819716690][380 ms][DEBUG] SU: done in 379 ms; outu0_a118 9504 5013 24058996 60576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:19:03][356414819716690][380 ms][DEBUG] targetPkg: running [2025-08-25 14:19:03][356414819716690][380 ms][DEBUG] END check_scloud in 380 ms [2025-08-25 14:19:03][356414819716690][380 ms][DEBUG] START check_boot_completed [2025-08-25 14:19:03][356414819716690][381 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:19:03][356414819716690][427 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:19:03][356414819716690][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:19:03][356414819716690][474 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:19:03][356414819716690][474 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:19:03][356414819716690][474 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:19:03][356414819716690][474 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819716690\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5950\"}'\'' -e'"" [2025-08-25 14:19:03][356414819716690][474 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:19:03][356414819716690][474 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819716690\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5950\"}'\'' -e'"" [2025-08-25 14:19:07][356414819716690][4910 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47c00745-1e6b-4999-9a3f-38b71e31e980","id":"QR_47c00745-1e6b-4999-9a3f-38b71e31e980","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:19:08][356414819716690][5066 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-25 14:19:08][356414819716690][5066 ms][DEBUG] END runCmdUntilRes#1 in 4593 ms [2025-08-25 14:19:08][356414819716690][5066 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:19:09][352133645702393][0 ms][INFO] === Request start === [2025-08-25 14:19:09][352133645702393][1 ms][DEBUG] START check_scloud [2025-08-25 14:19:09][352133645702393][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:19:10][352133645702393][343 ms][DEBUG] SU: done in 342 ms; outu0_a118 9504 5013 24199484 85472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:19:10][352133645702393][343 ms][DEBUG] targetPkg: running [2025-08-25 14:19:10][352133645702393][343 ms][DEBUG] END check_scloud in 343 ms [2025-08-25 14:19:10][352133645702393][343 ms][DEBUG] START check_boot_completed [2025-08-25 14:19:10][352133645702393][343 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:19:10][352133645702393][390 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:19:10][352133645702393][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:19:10][352133645702393][452 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 14:19:10][352133645702393][452 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:19:10][352133645702393][453 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:19:10][352133645702393][453 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133645702393\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8499\"}'\'' -e'"" [2025-08-25 14:19:10][352133645702393][453 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:19:10][352133645702393][453 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133645702393\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8499\"}'\'' -e'"" [2025-08-25 14:19:13][352133645702393][4045 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b1c68df-e0be-40bc-a896-bf233180039f","id":"QR_8b1c68df-e0be-40bc-a896-bf233180039f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:19:13][352133645702393][4201 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-08-25 14:19:13][352133645702393][4201 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-25 14:19:13][352133645702393][4201 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:21:05][350792527040792][1 ms][INFO] === Request start === [2025-08-25 14:21:05][350792527040792][1 ms][DEBUG] START check_scloud [2025-08-25 14:21:05][350792527040792][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:21:05][350792527040792][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 9504 5013 24310128 100468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:21:05][350792527040792][324 ms][DEBUG] targetPkg: running [2025-08-25 14:21:05][350792527040792][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-25 14:21:05][350792527040792][324 ms][DEBUG] START check_boot_completed [2025-08-25 14:21:05][350792527040792][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:21:05][350792527040792][355 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:21:05][350792527040792][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:21:05][350792527040792][404 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 14:21:05][350792527040792][404 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-25 14:21:05][350792527040792][404 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:21:05][350792527040792][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792527040792\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7742\"}'\'' -e'"" [2025-08-25 14:21:05][350792527040792][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:21:05][350792527040792][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792527040792\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7742\"}'\'' -e'"" [2025-08-25 14:21:10][350792527040792][5401 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e352367f-d719-4c54-b38d-4e5a37ca54b6","id":"QR_e352367f-d719-4c54-b38d-4e5a37ca54b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:21:10][350792527040792][5557 ms][DEBUG] proc_open done in 5153 ms; code=255; res.len=3343 [2025-08-25 14:21:10][350792527040792][5557 ms][DEBUG] END runCmdUntilRes#1 in 5153 ms [2025-08-25 14:21:10][350792527040792][5557 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:22:05][352749386438325][0 ms][INFO] === Request start === [2025-08-25 14:22:05][352749386438325][1 ms][DEBUG] START check_scloud [2025-08-25 14:22:05][352749386438325][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:22:05][352749386438325][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 9504 5013 24428052 112296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:22:05][352749386438325][279 ms][DEBUG] targetPkg: running [2025-08-25 14:22:05][352749386438325][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-25 14:22:05][352749386438325][279 ms][DEBUG] START check_boot_completed [2025-08-25 14:22:05][352749386438325][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:22:05][352749386438325][310 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:22:05][352749386438325][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:22:05][352749386438325][357 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:22:05][352749386438325][357 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 14:22:05][352749386438325][357 ms][DEBUG] START check_internet [2025-08-25 14:22:05][352749386438325][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:22:05][352749386438325][794 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.483/200.483/200.483/0.000 ms\n [2025-08-25 14:22:05][352749386438325][794 ms][DEBUG] check_internet: online [2025-08-25 14:22:05][352749386438325][795 ms][DEBUG] END check_internet in 438 ms [2025-08-25 14:22:05][352749386438325][795 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:22:05][352749386438325][795 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749386438325\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4844\"}'\'' -e'"" [2025-08-25 14:22:05][352749386438325][795 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:22:05][352749386438325][795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749386438325\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4844\"}'\'' -e'"" [2025-08-25 14:22:10][352749386438325][5840 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_919fdeb8-c6f7-41ca-ad8e-cae233a555df","id":"QR_919fdeb8-c6f7-41ca-ad8e-cae233a555df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:22:10][352749386438325][5996 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-25 14:22:10][352749386438325][5996 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-25 14:22:10][352749386438325][5996 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:22:16][352397454432927][0 ms][INFO] === Request start === [2025-08-25 14:22:16][352397454432927][1 ms][DEBUG] START check_scloud [2025-08-25 14:22:16][352397454432927][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:22:16][352397454432927][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 9504 5013 24564380 119636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:22:16][352397454432927][333 ms][DEBUG] targetPkg: running [2025-08-25 14:22:16][352397454432927][333 ms][DEBUG] END check_scloud in 332 ms [2025-08-25 14:22:16][352397454432927][333 ms][DEBUG] START check_boot_completed [2025-08-25 14:22:16][352397454432927][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:22:16][352397454432927][379 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:22:16][352397454432927][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:22:16][352397454432927][426 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:22:16][352397454432927][426 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:22:16][352397454432927][426 ms][DEBUG] START check_internet [2025-08-25 14:22:16][352397454432927][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:22:16][352397454432927][739 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.701/202.701/202.701/0.000 ms\n [2025-08-25 14:22:16][352397454432927][739 ms][DEBUG] check_internet: online [2025-08-25 14:22:16][352397454432927][739 ms][DEBUG] END check_internet in 313 ms [2025-08-25 14:22:16][352397454432927][739 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:22:16][352397454432927][739 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397454432927\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3629\"}'\'' -e'"" [2025-08-25 14:22:16][352397454432927][739 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:22:16][352397454432927][739 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397454432927\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3629\"}'\'' -e'"" [2025-08-25 14:22:20][352397454432927][4925 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46bab0ec-f4e3-4923-b569-08901f635d80","id":"QR_46bab0ec-f4e3-4923-b569-08901f635d80","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:22:21][352397454432927][5081 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-25 14:22:21][352397454432927][5081 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-25 14:22:21][352397454432927][5081 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:23:03][351885211793897][0 ms][INFO] === Request start === [2025-08-25 14:23:03][351885211793897][1 ms][DEBUG] START check_scloud [2025-08-25 14:23:03][351885211793897][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:23:04][351885211793897][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 9504 5013 24688348 129600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:23:04][351885211793897][313 ms][DEBUG] targetPkg: running [2025-08-25 14:23:04][351885211793897][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 14:23:04][351885211793897][313 ms][DEBUG] START check_boot_completed [2025-08-25 14:23:04][351885211793897][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:23:04][351885211793897][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:23:04][351885211793897][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:23:04][351885211793897][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:23:04][351885211793897][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:23:04][351885211793897][422 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:23:04][351885211793897][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351885211793897\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1396\"}'\'' -e'"" [2025-08-25 14:23:04][351885211793897][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:23:04][351885211793897][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351885211793897\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1396\"}'\'' -e'"" [2025-08-25 14:23:08][351885211793897][4358 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_487d188f-e9a7-41d4-954e-602746135dad","id":"QR_487d188f-e9a7-41d4-954e-602746135dad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:23:08][351885211793897][4514 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-25 14:23:08][351885211793897][4514 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-25 14:23:08][351885211793897][4514 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:25:03][355289661281006][1 ms][INFO] === Request start === [2025-08-25 14:25:03][355289661281006][1 ms][DEBUG] START check_scloud [2025-08-25 14:25:03][355289661281006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:25:04][355289661281006][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 9504 5013 24849216 135692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:25:04][355289661281006][310 ms][DEBUG] targetPkg: running [2025-08-25 14:25:04][355289661281006][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 14:25:04][355289661281006][310 ms][DEBUG] START check_boot_completed [2025-08-25 14:25:04][355289661281006][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:25:04][355289661281006][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:25:04][355289661281006][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:25:04][355289661281006][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:25:04][355289661281006][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:25:04][355289661281006][403 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:25:04][355289661281006][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355289661281006\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2152\"}'\'' -e'"" [2025-08-25 14:25:04][355289661281006][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:25:04][355289661281006][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355289661281006\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2152\"}'\'' -e'"" [2025-08-25 14:25:08][355289661281006][4824 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_defb5f07-ed02-41dc-88dd-1287a8513c07","id":"QR_defb5f07-ed02-41dc-88dd-1287a8513c07","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:25:08][355289661281006][4980 ms][DEBUG] proc_open done in 4577 ms; code=255; res.len=3343 [2025-08-25 14:25:08][355289661281006][4980 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-25 14:25:08][355289661281006][4980 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:27:03][350637540909566][0 ms][INFO] === Request start === [2025-08-25 14:27:03][350637540909566][1 ms][DEBUG] START check_scloud [2025-08-25 14:27:03][350637540909566][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:27:03][350637540909566][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 9504 5013 24983460 147644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:27:03][350637540909566][328 ms][DEBUG] targetPkg: running [2025-08-25 14:27:03][350637540909566][328 ms][DEBUG] END check_scloud in 327 ms [2025-08-25 14:27:03][350637540909566][328 ms][DEBUG] START check_boot_completed [2025-08-25 14:27:03][350637540909566][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:27:03][350637540909566][375 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:27:03][350637540909566][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:27:03][350637540909566][422 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:27:03][350637540909566][422 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 14:27:03][350637540909566][422 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:27:03][350637540909566][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637540909566\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"S08\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8375\"}'\'' -e'"" [2025-08-25 14:27:03][350637540909566][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:27:03][350637540909566][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637540909566\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"S08\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8375\"}'\'' -e'"" [2025-08-25 14:27:08][350637540909566][4920 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a8821d3-8f27-4dcb-8ba1-ad5ba6a1f170","id":"QR_3a8821d3-8f27-4dcb-8ba1-ad5ba6a1f170","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:27:08][350637540909566][5077 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-08-25 14:27:08][350637540909566][5077 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-08-25 14:27:08][350637540909566][5077 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:27:11][355084250889040][1 ms][INFO] === Request start === [2025-08-25 14:27:11][355084250889040][1 ms][DEBUG] START check_scloud [2025-08-25 14:27:11][355084250889040][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:27:11][355084250889040][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 9504 5013 25146480 158340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:27:11][355084250889040][307 ms][DEBUG] targetPkg: running [2025-08-25 14:27:11][355084250889040][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 14:27:11][355084250889040][307 ms][DEBUG] START check_boot_completed [2025-08-25 14:27:11][355084250889040][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:27:11][355084250889040][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:27:11][355084250889040][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:27:11][355084250889040][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:27:11][355084250889040][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:27:11][355084250889040][416 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:27:11][355084250889040][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250889040\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2471\"}'\'' -e'"" [2025-08-25 14:27:11][355084250889040][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:27:11][355084250889040][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250889040\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2471\"}'\'' -e'"" [2025-08-25 14:27:15][355084250889040][4837 ms][DEBUG] proc_open done in 4421 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 14:27:15][355084250889040][4837 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-08-25 14:27:15][355084250889040][4837 ms][WARN] Detected error: Process with pid 9504 either refused to load frida-agent, or terminated during injection [2025-08-25 14:27:15][355084250889040][4837 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 14:27:16][355084250889040][4978 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 14:27:16][355084250889040][4978 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 14:27:16][355084250889040][4978 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:27:16][355084250889040][5102 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 14:27:16][355084250889040][5102 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:27:16][355084250889040][5307 ms][DEBUG] SU: done in 204 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 14:27:18][355084250889040][7320 ms][DEBUG] START check_boot_completed [2025-08-25 14:27:18][355084250889040][7321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:27:18][355084250889040][7367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:27:18][355084250889040][7368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:27:18][355084250889040][7430 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:27:18][355084250889040][7430 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 14:27:21][355084250889040][10445 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 14:27:21][355084250889040][10445 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250889040\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2471\"}'\'' -e'"" [2025-08-25 14:27:25][355084250889040][13975 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_116d9c96-ea2d-4b64-81bd-f63f6d6e2807","id":"QR_116d9c96-ea2d-4b64-81bd-f63f6d6e2807","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:27:25][355084250889040][14131 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-08-25 14:27:25][355084250889040][14132 ms][DEBUG] END runCmdUntilRes#2 in 3687 ms [2025-08-25 14:27:25][355084250889040][14132 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:30:04][354106685317478][1 ms][INFO] === Request start === [2025-08-25 14:30:04][354106685317478][1 ms][DEBUG] START check_scloud [2025-08-25 14:30:04][354106685317478][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:30:04][354106685317478][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 18192 5013 23827712 127552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:30:04][354106685317478][315 ms][DEBUG] targetPkg: running [2025-08-25 14:30:04][354106685317478][316 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 14:30:04][354106685317478][316 ms][DEBUG] START check_boot_completed [2025-08-25 14:30:04][354106685317478][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:30:04][354106685317478][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:30:04][354106685317478][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:30:04][354106685317478][410 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 14:30:04][354106685317478][411 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 14:30:04][354106685317478][411 ms][DEBUG] START check_internet [2025-08-25 14:30:04][354106685317478][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:30:05][354106685317478][893 ms][DEBUG] SU: done in 483 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.523/201.523/201.523/0.000 ms\n [2025-08-25 14:30:05][354106685317478][893 ms][DEBUG] check_internet: online [2025-08-25 14:30:05][354106685317478][894 ms][DEBUG] END check_internet in 483 ms [2025-08-25 14:30:05][354106685317478][894 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:30:05][354106685317478][894 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106685317478\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9853\"}'\'' -e'"" [2025-08-25 14:30:05][354106685317478][894 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:30:05][354106685317478][894 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106685317478\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9853\"}'\'' -e'"" [2025-08-25 14:30:09][354106685317478][5033 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b6c2619e-d68f-42e1-9781-40e571356e46","id":"QR_b6c2619e-d68f-42e1-9781-40e571356e46","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:30:09][354106685317478][5189 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-25 14:30:09][354106685317478][5189 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-25 14:30:09][354106685317478][5189 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:30:12][350973428595510][1 ms][INFO] === Request start === [2025-08-25 14:30:12][350973428595510][1 ms][DEBUG] START check_scloud [2025-08-25 14:30:12][350973428595510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:30:12][350973428595510][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 18192 5013 24000776 138376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:30:12][350973428595510][315 ms][DEBUG] targetPkg: running [2025-08-25 14:30:12][350973428595510][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 14:30:12][350973428595510][315 ms][DEBUG] START check_boot_completed [2025-08-25 14:30:12][350973428595510][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:30:12][350973428595510][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:30:12][350973428595510][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:30:12][350973428595510][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:30:12][350973428595510][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:30:12][350973428595510][425 ms][DEBUG] START check_internet [2025-08-25 14:30:12][350973428595510][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:30:12][350973428595510][752 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=179 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 179.421/179.421/179.421/0.000 ms\n [2025-08-25 14:30:12][350973428595510][753 ms][DEBUG] check_internet: online [2025-08-25 14:30:12][350973428595510][753 ms][DEBUG] END check_internet in 328 ms [2025-08-25 14:30:12][350973428595510][753 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:30:12][350973428595510][753 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973428595510\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4252\"}'\'' -e'"" [2025-08-25 14:30:12][350973428595510][753 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:30:12][350973428595510][753 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350973428595510\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4252\"}'\'' -e'"" [2025-08-25 14:30:16][350973428595510][4345 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92cec96d-2ca0-4459-8621-b6f5f2de03df","id":"QR_92cec96d-2ca0-4459-8621-b6f5f2de03df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:30:16][350973428595510][4501 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-08-25 14:30:16][350973428595510][4501 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-25 14:30:16][350973428595510][4501 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:31:05][357651717576051][0 ms][INFO] === Request start === [2025-08-25 14:31:05][357651717576051][1 ms][DEBUG] START check_scloud [2025-08-25 14:31:05][357651717576051][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:31:05][357651717576051][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 18192 5013 24137096 150136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:31:05][357651717576051][315 ms][DEBUG] targetPkg: running [2025-08-25 14:31:05][357651717576051][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 14:31:05][357651717576051][315 ms][DEBUG] START check_boot_completed [2025-08-25 14:31:05][357651717576051][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:31:05][357651717576051][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:31:05][357651717576051][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:31:05][357651717576051][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:31:05][357651717576051][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:31:05][357651717576051][425 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:31:05][357651717576051][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651717576051\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5959\"}'\'' -e'"" [2025-08-25 14:31:05][357651717576051][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:31:05][357651717576051][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651717576051\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5959\"}'\'' -e'"" [2025-08-25 14:31:11][357651717576051][6095 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_20a259ce-fad8-4309-b942-8b80101f34a0","id":"QR_20a259ce-fad8-4309-b942-8b80101f34a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:31:11][357651717576051][6251 ms][DEBUG] proc_open done in 5826 ms; code=255; res.len=3343 [2025-08-25 14:31:11][357651717576051][6251 ms][DEBUG] END runCmdUntilRes#1 in 5826 ms [2025-08-25 14:31:11][357651717576051][6251 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:33:03][353684141523773][1 ms][INFO] === Request start === [2025-08-25 14:33:03][353684141523773][1 ms][DEBUG] START check_scloud [2025-08-25 14:33:03][353684141523773][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:33:03][353684141523773][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 18192 5013 24255084 161260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:33:03][353684141523773][299 ms][DEBUG] targetPkg: running [2025-08-25 14:33:03][353684141523773][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 14:33:03][353684141523773][299 ms][DEBUG] START check_boot_completed [2025-08-25 14:33:03][353684141523773][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:33:03][353684141523773][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:33:03][353684141523773][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:33:03][353684141523773][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:33:03][353684141523773][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 14:33:03][353684141523773][377 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:33:03][353684141523773][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141523773\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9225\"}'\'' -e'"" [2025-08-25 14:33:03][353684141523773][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:33:03][353684141523773][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141523773\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9225\"}'\'' -e'"" [2025-08-25 14:33:07][353684141523773][4517 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8aa7e996-d21c-4a84-b35c-b0fa508e6fdc","id":"QR_8aa7e996-d21c-4a84-b35c-b0fa508e6fdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:33:08][353684141523773][4673 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-25 14:33:08][353684141523773][4673 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-25 14:33:08][353684141523773][4673 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:35:03][358815106806275][0 ms][INFO] === Request start === [2025-08-25 14:35:03][358815106806275][0 ms][DEBUG] START check_scloud [2025-08-25 14:35:03][358815106806275][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:35:04][358815106806275][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 18192 5013 24401680 172364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:35:04][358815106806275][309 ms][DEBUG] targetPkg: running [2025-08-25 14:35:04][358815106806275][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 14:35:04][358815106806275][309 ms][DEBUG] START check_boot_completed [2025-08-25 14:35:04][358815106806275][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:35:04][358815106806275][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:35:04][358815106806275][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:35:04][358815106806275][405 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 14:35:04][358815106806275][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 14:35:04][358815106806275][405 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:35:04][358815106806275][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358815106806275\",\"model\":\"SM-G975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MAX\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2847\"}'\'' -e'"" [2025-08-25 14:35:04][358815106806275][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:35:04][358815106806275][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358815106806275\",\"model\":\"SM-G975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MAX\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2847\"}'\'' -e'"" [2025-08-25 14:35:08][358815106806275][4652 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a8eda68-37dc-4b66-ad66-756c9db339bb","id":"QR_2a8eda68-37dc-4b66-ad66-756c9db339bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:35:08][358815106806275][4808 ms][DEBUG] proc_open done in 4403 ms; code=255; res.len=3343 [2025-08-25 14:35:08][358815106806275][4808 ms][DEBUG] END runCmdUntilRes#1 in 4403 ms [2025-08-25 14:35:08][358815106806275][4808 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:36:03][354791648459028][1 ms][INFO] === Request start === [2025-08-25 14:36:03][354791648459028][1 ms][DEBUG] START check_scloud [2025-08-25 14:36:03][354791648459028][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:36:04][354791648459028][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 18192 5013 24550260 183384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:36:04][354791648459028][319 ms][DEBUG] targetPkg: running [2025-08-25 14:36:04][354791648459028][319 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 14:36:04][354791648459028][319 ms][DEBUG] START check_boot_completed [2025-08-25 14:36:04][354791648459028][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:36:04][354791648459028][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:36:04][354791648459028][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:36:04][354791648459028][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:36:04][354791648459028][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:36:04][354791648459028][412 ms][DEBUG] START check_internet [2025-08-25 14:36:04][354791648459028][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:36:04][354791648459028][881 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.450/201.450/201.450/0.000 ms\n [2025-08-25 14:36:04][354791648459028][881 ms][DEBUG] check_internet: online [2025-08-25 14:36:04][354791648459028][881 ms][DEBUG] END check_internet in 469 ms [2025-08-25 14:36:04][354791648459028][881 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:36:04][354791648459028][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791648459028\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4004\"}'\'' -e'"" [2025-08-25 14:36:04][354791648459028][881 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:36:04][354791648459028][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791648459028\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4004\"}'\'' -e'"" [2025-08-25 14:36:09][354791648459028][5223 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1eaf345c-7b82-43d4-b891-a98776d8f968","id":"QR_1eaf345c-7b82-43d4-b891-a98776d8f968","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:36:09][354791648459028][5380 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-08-25 14:36:09][354791648459028][5380 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-08-25 14:36:09][354791648459028][5380 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:38:03][351978522406273][0 ms][INFO] === Request start === [2025-08-25 14:38:03][351978522406273][1 ms][DEBUG] START check_scloud [2025-08-25 14:38:03][351978522406273][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:38:03][351978522406273][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 18192 5013 24680408 185568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:38:03][351978522406273][321 ms][DEBUG] targetPkg: running [2025-08-25 14:38:03][351978522406273][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-25 14:38:03][351978522406273][321 ms][DEBUG] START check_boot_completed [2025-08-25 14:38:03][351978522406273][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:38:03][351978522406273][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:38:03][351978522406273][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:38:03][351978522406273][446 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 14:38:03][351978522406273][446 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-25 14:38:03][351978522406273][446 ms][DEBUG] START check_internet [2025-08-25 14:38:03][351978522406273][446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:38:04][351978522406273][790 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=243 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 243.537/243.537/243.537/0.000 ms\n [2025-08-25 14:38:04][351978522406273][790 ms][DEBUG] check_internet: online [2025-08-25 14:38:04][351978522406273][790 ms][DEBUG] END check_internet in 344 ms [2025-08-25 14:38:04][351978522406273][790 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:38:04][351978522406273][790 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522406273\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3031\"}'\'' -e'"" [2025-08-25 14:38:04][351978522406273][790 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:38:04][351978522406273][790 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522406273\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3031\"}'\'' -e'"" [2025-08-25 14:38:08][351978522406273][4851 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af171010-4cc5-405c-a0aa-8aaa114c3463","id":"QR_af171010-4cc5-405c-a0aa-8aaa114c3463","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:38:08][351978522406273][5007 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-25 14:38:08][351978522406273][5007 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-25 14:38:08][351978522406273][5007 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:39:03][353628421606964][1 ms][INFO] === Request start === [2025-08-25 14:39:03][353628421606964][1 ms][DEBUG] START check_scloud [2025-08-25 14:39:03][353628421606964][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:39:04][353628421606964][296 ms][DEBUG] SU: done in 294 ms; outu0_a118 18192 5013 24814780 194204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:39:04][353628421606964][296 ms][DEBUG] targetPkg: running [2025-08-25 14:39:04][353628421606964][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-25 14:39:04][353628421606964][296 ms][DEBUG] START check_boot_completed [2025-08-25 14:39:04][353628421606964][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:39:04][353628421606964][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:39:04][353628421606964][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:39:04][353628421606964][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:39:04][353628421606964][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:39:04][353628421606964][405 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:39:04][353628421606964][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628421606964\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8100\"}'\'' -e'"" [2025-08-25 14:39:04][353628421606964][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:39:04][353628421606964][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628421606964\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8100\"}'\'' -e'"" [2025-08-25 14:39:08][353628421606964][4466 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_122d4d15-dd1e-4553-9eee-578cc9d1a1f3","id":"QR_122d4d15-dd1e-4553-9eee-578cc9d1a1f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:39:08][353628421606964][4622 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-25 14:39:08][353628421606964][4623 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-25 14:39:08][353628421606964][4623 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:39:09][352432792290123][0 ms][INFO] === Request start === [2025-08-25 14:39:09][352432792290123][0 ms][DEBUG] START check_scloud [2025-08-25 14:39:09][352432792290123][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:39:10][352432792290123][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 18192 5013 24936900 205076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:39:10][352432792290123][296 ms][DEBUG] targetPkg: running [2025-08-25 14:39:10][352432792290123][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-25 14:39:10][352432792290123][296 ms][DEBUG] START check_boot_completed [2025-08-25 14:39:10][352432792290123][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:39:10][352432792290123][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:39:10][352432792290123][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:39:10][352432792290123][389 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 14:39:10][352432792290123][390 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 14:39:10][352432792290123][390 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:39:10][352432792290123][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432792290123\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8037\"}'\'' -e'"" [2025-08-25 14:39:10][352432792290123][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:39:10][352432792290123][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432792290123\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8037\"}'\'' -e'"" [2025-08-25 14:39:14][352432792290123][4310 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_324a274a-8c09-4243-ac8a-00d07c8716db","id":"QR_324a274a-8c09-4243-ac8a-00d07c8716db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:39:14][352432792290123][4466 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-25 14:39:14][352432792290123][4466 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-25 14:39:14][352432792290123][4466 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:40:05][351617736825148][0 ms][INFO] === Request start === [2025-08-25 14:40:05][351617736825148][0 ms][DEBUG] START check_scloud [2025-08-25 14:40:05][351617736825148][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:40:05][351617736825148][310 ms][DEBUG] SU: done in 310 ms; out [2025-08-25 14:40:05][351617736825148][310 ms][WARN] targetPkg: not running, restarting [2025-08-25 14:40:05][351617736825148][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:40:05][351617736825148][450 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 14:40:05][351617736825148][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:40:05][351617736825148][622 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 14:40:07][351617736825148][2637 ms][DEBUG] END check_scloud in 2637 ms [2025-08-25 14:40:07][351617736825148][2637 ms][DEBUG] START check_boot_completed [2025-08-25 14:40:07][351617736825148][2637 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:40:07][351617736825148][2684 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:40:07][351617736825148][2684 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:40:07][351617736825148][2747 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 14:40:07][351617736825148][2747 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 14:40:07][351617736825148][2747 ms][DEBUG] START check_internet [2025-08-25 14:40:07][351617736825148][2747 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:40:08][351617736825148][3231 ms][DEBUG] SU: done in 483 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.139/201.139/201.139/0.000 ms\n [2025-08-25 14:40:08][351617736825148][3231 ms][DEBUG] check_internet: online [2025-08-25 14:40:08][351617736825148][3231 ms][DEBUG] END check_internet in 484 ms [2025-08-25 14:40:08][351617736825148][3231 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:40:08][351617736825148][3231 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351617736825148\",\"model\":\"SM-A546W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9671\"}'\'' -e'"" [2025-08-25 14:40:08][351617736825148][3231 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:40:08][351617736825148][3231 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351617736825148\",\"model\":\"SM-A546W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9671\"}'\'' -e'"" [2025-08-25 14:40:14][351617736825148][9089 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e958678-377f-4be1-8199-d77034c417b9","id":"QR_1e958678-377f-4be1-8199-d77034c417b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:40:14][351617736825148][9245 ms][DEBUG] proc_open done in 6014 ms; code=255; res.len=3343 [2025-08-25 14:40:14][351617736825148][9245 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-08-25 14:40:14][351617736825148][9245 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:42:03][352192668541195][1 ms][INFO] === Request start === [2025-08-25 14:42:03][352192668541195][1 ms][DEBUG] START check_scloud [2025-08-25 14:42:03][352192668541195][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:42:04][352192668541195][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 19741 5013 23768560 127724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:42:04][352192668541195][315 ms][DEBUG] targetPkg: running [2025-08-25 14:42:04][352192668541195][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 14:42:04][352192668541195][315 ms][DEBUG] START check_boot_completed [2025-08-25 14:42:04][352192668541195][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:42:04][352192668541195][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:42:04][352192668541195][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:42:04][352192668541195][440 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 14:42:04][352192668541195][440 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 14:42:04][352192668541195][440 ms][DEBUG] START check_internet [2025-08-25 14:42:04][352192668541195][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:42:04][352192668541195][721 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=170 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 170.777/170.777/170.777/0.000 ms\n [2025-08-25 14:42:04][352192668541195][721 ms][DEBUG] check_internet: online [2025-08-25 14:42:04][352192668541195][721 ms][DEBUG] END check_internet in 281 ms [2025-08-25 14:42:04][352192668541195][721 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:42:04][352192668541195][722 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192668541195\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1564\"}'\'' -e'"" [2025-08-25 14:42:04][352192668541195][722 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:42:04][352192668541195][722 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192668541195\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1564\"}'\'' -e'"" [2025-08-25 14:42:08][352192668541195][4954 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07d37de3-c0c0-458e-9c99-8ee557a0fbb8","id":"QR_07d37de3-c0c0-458e-9c99-8ee557a0fbb8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:42:08][352192668541195][5111 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-25 14:42:08][352192668541195][5111 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-25 14:42:08][352192668541195][5111 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:43:03][357866600490042][0 ms][INFO] === Request start === [2025-08-25 14:43:03][357866600490042][1 ms][DEBUG] START check_scloud [2025-08-25 14:43:03][357866600490042][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:43:04][357866600490042][323 ms][DEBUG] SU: done in 323 ms; outu0_a118 19741 5013 23861824 138492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:43:04][357866600490042][323 ms][DEBUG] targetPkg: running [2025-08-25 14:43:04][357866600490042][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-25 14:43:04][357866600490042][324 ms][DEBUG] START check_boot_completed [2025-08-25 14:43:04][357866600490042][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:43:04][357866600490042][370 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:43:04][357866600490042][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:43:04][357866600490042][417 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:43:04][357866600490042][417 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 14:43:04][357866600490042][417 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:43:04][357866600490042][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866600490042\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6401\"}'\'' -e'"" [2025-08-25 14:43:04][357866600490042][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:43:04][357866600490042][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866600490042\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6401\"}'\'' -e'"" [2025-08-25 14:43:08][357866600490042][4182 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19ad1906-a5d1-49c2-864f-70c587730738","id":"QR_19ad1906-a5d1-49c2-864f-70c587730738","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:43:08][357866600490042][4338 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-25 14:43:08][357866600490042][4338 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-25 14:43:08][357866600490042][4338 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:45:04][351364039886721][1 ms][INFO] === Request start === [2025-08-25 14:45:04][351364039886721][1 ms][DEBUG] START check_scloud [2025-08-25 14:45:04][351364039886721][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:45:04][351364039886721][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 19741 5013 24022628 150144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:45:04][351364039886721][309 ms][DEBUG] targetPkg: running [2025-08-25 14:45:04][351364039886721][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 14:45:04][351364039886721][309 ms][DEBUG] START check_boot_completed [2025-08-25 14:45:04][351364039886721][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:45:04][351364039886721][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:45:04][351364039886721][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:45:04][351364039886721][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:45:04][351364039886721][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 14:45:04][351364039886721][388 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:45:04][351364039886721][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351364039886721\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4027\"}'\'' -e'"" [2025-08-25 14:45:04][351364039886721][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:45:04][351364039886721][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351364039886721\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4027\"}'\'' -e'"" [2025-08-25 14:45:08][351364039886721][4449 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab4066f1-237b-4398-90c2-22611f561b98","id":"QR_ab4066f1-237b-4398-90c2-22611f561b98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:45:08][351364039886721][4605 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-25 14:45:08][351364039886721][4605 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-25 14:45:08][351364039886721][4605 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:46:03][355039460888588][0 ms][INFO] === Request start === [2025-08-25 14:46:03][355039460888588][1 ms][DEBUG] START check_scloud [2025-08-25 14:46:03][355039460888588][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:46:03][355039460888588][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 19741 5013 24146696 161012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:46:03][355039460888588][303 ms][DEBUG] targetPkg: running [2025-08-25 14:46:03][355039460888588][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 14:46:03][355039460888588][303 ms][DEBUG] START check_boot_completed [2025-08-25 14:46:03][355039460888588][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:46:03][355039460888588][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:46:03][355039460888588][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:46:03][355039460888588][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:46:03][355039460888588][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 14:46:03][355039460888588][397 ms][DEBUG] START check_internet [2025-08-25 14:46:03][355039460888588][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:46:04][355039460888588][880 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.315/201.315/201.315/0.000 ms\n [2025-08-25 14:46:04][355039460888588][881 ms][DEBUG] check_internet: online [2025-08-25 14:46:04][355039460888588][881 ms][DEBUG] END check_internet in 484 ms [2025-08-25 14:46:04][355039460888588][881 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:46:04][355039460888588][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355039460888588\",\"model\":\"SM-A236E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2218\"}'\'' -e'"" [2025-08-25 14:46:04][355039460888588][881 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:46:04][355039460888588][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355039460888588\",\"model\":\"SM-A236E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2218\"}'\'' -e'"" [2025-08-25 14:46:08][355039460888588][5020 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1b6bc64-3d06-40fe-bbb2-29000847ebbc","id":"QR_f1b6bc64-3d06-40fe-bbb2-29000847ebbc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:46:08][355039460888588][5176 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-25 14:46:08][355039460888588][5176 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-25 14:46:08][355039460888588][5176 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:48:04][357674436464086][1 ms][INFO] === Request start === [2025-08-25 14:48:04][357674436464086][1 ms][DEBUG] START check_scloud [2025-08-25 14:48:04][357674436464086][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:48:04][357674436464086][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 19741 5013 24266668 172408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:48:04][357674436464086][268 ms][DEBUG] targetPkg: running [2025-08-25 14:48:04][357674436464086][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-25 14:48:04][357674436464086][269 ms][DEBUG] START check_boot_completed [2025-08-25 14:48:04][357674436464086][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:48:04][357674436464086][315 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:48:04][357674436464086][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:48:04][357674436464086][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:48:04][357674436464086][362 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 14:48:04][357674436464086][362 ms][DEBUG] START check_internet [2025-08-25 14:48:04][357674436464086][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:48:05][357674436464086][706 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.579/242.579/242.579/0.000 ms\n [2025-08-25 14:48:05][357674436464086][706 ms][DEBUG] check_internet: online [2025-08-25 14:48:05][357674436464086][706 ms][DEBUG] END check_internet in 344 ms [2025-08-25 14:48:05][357674436464086][706 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:48:05][357674436464086][706 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436464086\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1024\"}'\'' -e'"" [2025-08-25 14:48:05][357674436464086][706 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:48:05][357674436464086][706 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436464086\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1024\"}'\'' -e'"" [2025-08-25 14:48:09][357674436464086][4892 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8dc5245e-3093-475e-934c-7c24c1c65f40","id":"QR_8dc5245e-3093-475e-934c-7c24c1c65f40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:48:09][357674436464086][5048 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-25 14:48:09][357674436464086][5048 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-25 14:48:09][357674436464086][5048 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:48:11][350287312564916][0 ms][INFO] === Request start === [2025-08-25 14:48:11][350287312564916][1 ms][DEBUG] START check_scloud [2025-08-25 14:48:11][350287312564916][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:48:12][350287312564916][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 19741 5013 24392884 183152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:48:12][350287312564916][300 ms][DEBUG] targetPkg: running [2025-08-25 14:48:12][350287312564916][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 14:48:12][350287312564916][300 ms][DEBUG] START check_boot_completed [2025-08-25 14:48:12][350287312564916][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:48:12][350287312564916][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:48:12][350287312564916][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:48:12][350287312564916][379 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 14:48:12][350287312564916][379 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 14:48:12][350287312564916][379 ms][DEBUG] START check_internet [2025-08-25 14:48:12][350287312564916][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:48:12][350287312564916][628 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.598/139.598/139.598/0.000 ms\n [2025-08-25 14:48:12][350287312564916][628 ms][DEBUG] check_internet: online [2025-08-25 14:48:12][350287312564916][628 ms][DEBUG] END check_internet in 249 ms [2025-08-25 14:48:12][350287312564916][628 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:48:12][350287312564916][629 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287312564916\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5916\"}'\'' -e'"" [2025-08-25 14:48:12][350287312564916][629 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:48:12][350287312564916][629 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287312564916\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5916\"}'\'' -e'"" [2025-08-25 14:48:16][350287312564916][4690 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e06869a6-72bb-4359-ba2f-629a21c5c409","id":"QR_e06869a6-72bb-4359-ba2f-629a21c5c409","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:48:16][350287312564916][4846 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-25 14:48:16][350287312564916][4846 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-25 14:48:16][350287312564916][4846 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:51:29][352961654065355][1 ms][INFO] === Request start === [2025-08-25 14:51:29][352961654065355][1 ms][DEBUG] START check_scloud [2025-08-25 14:51:29][352961654065355][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:51:29][352961654065355][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 19741 5013 24488308 195280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:51:29][352961654065355][303 ms][DEBUG] targetPkg: running [2025-08-25 14:51:29][352961654065355][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 14:51:29][352961654065355][303 ms][DEBUG] START check_boot_completed [2025-08-25 14:51:29][352961654065355][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:51:29][352961654065355][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:51:29][352961654065355][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:51:29][352961654065355][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:51:29][352961654065355][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 14:51:29][352961654065355][381 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:51:29][352961654065355][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352961654065355\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3007\"}'\'' -e'"" [2025-08-25 14:51:29][352961654065355][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:51:29][352961654065355][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352961654065355\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3007\"}'\'' -e'"" [2025-08-25 14:51:33][352961654065355][4224 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 14:51:33][352961654065355][4380 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=107 [2025-08-25 14:51:33][352961654065355][4380 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-25 14:51:33][352961654065355][4380 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 14:51:34][][0 ms][INFO] === Request start === [2025-08-25 14:51:34][][1 ms][DEBUG] START check_scloud [2025-08-25 14:51:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:51:34][][267 ms][DEBUG] SU: done in 267 ms; outu0_a118 19741 5013 24665724 206144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:51:34][][267 ms][DEBUG] targetPkg: running [2025-08-25 14:51:34][][267 ms][DEBUG] END check_scloud in 267 ms [2025-08-25 14:51:34][][267 ms][DEBUG] START check_boot_completed [2025-08-25 14:51:34][][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:51:34][][298 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:51:34][][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:51:34][][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:51:34][][346 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 14:51:34][][346 ms][DEBUG] rawBody.length=1129 [2025-08-25 14:51:34][][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCTA0XQXCJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5695\"}'\'' -e'"" [2025-08-25 14:51:34][][346 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:51:34][][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCTA0XQXCJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5695\"}'\'' -e'"" [2025-08-25 14:51:37][][3782 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 14:51:38][][3938 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=107 [2025-08-25 14:51:38][][3938 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-08-25 14:51:38][][3938 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 14:51:39][352961654065355][0 ms][INFO] === Request start === [2025-08-25 14:51:39][352961654065355][1 ms][DEBUG] START check_scloud [2025-08-25 14:51:39][352961654065355][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:51:40][352961654065355][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 19741 5013 24828804 217996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:51:40][352961654065355][298 ms][DEBUG] targetPkg: running [2025-08-25 14:51:40][352961654065355][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 14:51:40][352961654065355][298 ms][DEBUG] START check_boot_completed [2025-08-25 14:51:40][352961654065355][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:51:40][352961654065355][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:51:40][352961654065355][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:51:40][352961654065355][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:51:40][352961654065355][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:51:40][352961654065355][391 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:51:40][352961654065355][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352961654065355\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6843\"}'\'' -e'"" [2025-08-25 14:51:40][352961654065355][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:51:40][352961654065355][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352961654065355\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6843\"}'\'' -e'"" [2025-08-25 14:51:51][352961654065355][11545 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d58ba5c-47f0-464c-88df-63a3a9251e6b","id":"QR_0d58ba5c-47f0-464c-88df-63a3a9251e6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:51:51][352961654065355][11701 ms][DEBUG] proc_open done in 11310 ms; code=255; res.len=3343 [2025-08-25 14:51:51][352961654065355][11701 ms][DEBUG] END runCmdUntilRes#1 in 11310 ms [2025-08-25 14:51:51][352961654065355][11701 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:55:30][358475771799204][1 ms][INFO] === Request start === [2025-08-25 14:55:30][358475771799204][1 ms][DEBUG] START check_scloud [2025-08-25 14:55:30][358475771799204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:55:30][358475771799204][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 19741 5013 24923288 172016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:55:30][358475771799204][310 ms][DEBUG] targetPkg: running [2025-08-25 14:55:30][358475771799204][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 14:55:30][358475771799204][310 ms][DEBUG] START check_boot_completed [2025-08-25 14:55:30][358475771799204][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:55:30][358475771799204][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:55:30][358475771799204][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:55:30][358475771799204][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:55:30][358475771799204][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 14:55:30][358475771799204][388 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:55:30][358475771799204][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358475771799204\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3344\"}'\'' -e'"" [2025-08-25 14:55:30][358475771799204][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:55:30][358475771799204][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358475771799204\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3344\"}'\'' -e'"" [2025-08-25 14:55:35][358475771799204][4825 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 14:55:35][358475771799204][4981 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=107 [2025-08-25 14:55:35][358475771799204][4981 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-25 14:55:35][358475771799204][4981 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 14:55:35][][0 ms][INFO] === Request start === [2025-08-25 14:55:35][][1 ms][DEBUG] START check_scloud [2025-08-25 14:55:35][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:55:36][][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 19741 5013 25106968 154740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:55:36][][319 ms][DEBUG] targetPkg: running [2025-08-25 14:55:36][][319 ms][DEBUG] END check_scloud in 319 ms [2025-08-25 14:55:36][][319 ms][DEBUG] START check_boot_completed [2025-08-25 14:55:36][][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:55:36][][350 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:55:36][][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:55:36][][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:55:36][][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 14:55:36][][397 ms][DEBUG] rawBody.length=1129 [2025-08-25 14:55:36][][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R74S2P5J\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8789\"}'\'' -e'"" [2025-08-25 14:55:36][][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:55:36][][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R74S2P5J\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8789\"}'\'' -e'"" [2025-08-25 14:55:40][][4584 ms][DEBUG] proc_open done in 4186 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 14:55:40][][4584 ms][DEBUG] END runCmdUntilRes#1 in 4187 ms [2025-08-25 14:55:40][][4584 ms][WARN] Detected error: Process with pid 19741 either refused to load frida-agent, or terminated during injection [2025-08-25 14:55:40][][4584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 14:55:40][][4724 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 14:55:40][][4725 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 14:55:40][][4725 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 14:55:40][][4849 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 14:55:40][][4850 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 14:55:40][][5021 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 14:55:42][][7036 ms][DEBUG] START check_boot_completed [2025-08-25 14:55:42][][7036 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:55:42][][7083 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:55:42][][7083 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:55:42][][7130 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:55:42][][7130 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 14:55:45][][10145 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 14:55:45][][10145 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R74S2P5J\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8789\"}'\'' -e'"" [2025-08-25 14:55:49][][13441 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 14:55:49][][13597 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=107 [2025-08-25 14:55:49][][13597 ms][DEBUG] END runCmdUntilRes#2 in 3453 ms [2025-08-25 14:55:49][][13597 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 14:55:51][358475771799204][0 ms][INFO] === Request start === [2025-08-25 14:55:51][358475771799204][1 ms][DEBUG] START check_scloud [2025-08-25 14:55:51][358475771799204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:55:51][358475771799204][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 21816 5013 23827996 123512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:55:51][358475771799204][246 ms][DEBUG] targetPkg: running [2025-08-25 14:55:51][358475771799204][247 ms][DEBUG] END check_scloud in 246 ms [2025-08-25 14:55:51][358475771799204][247 ms][DEBUG] START check_boot_completed [2025-08-25 14:55:51][358475771799204][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:55:51][358475771799204][293 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:55:51][358475771799204][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:55:51][358475771799204][355 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:55:51][358475771799204][356 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:55:51][358475771799204][356 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:55:51][358475771799204][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358475771799204\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3918\"}'\'' -e'"" [2025-08-25 14:55:51][358475771799204][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:55:51][358475771799204][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358475771799204\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3918\"}'\'' -e'"" [2025-08-25 14:55:57][358475771799204][5948 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d75e5ac-8a12-429d-b111-fef85036b1d5","id":"QR_9d75e5ac-8a12-429d-b111-fef85036b1d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:55:57][358475771799204][6104 ms][DEBUG] proc_open done in 5748 ms; code=255; res.len=3343 [2025-08-25 14:55:57][358475771799204][6104 ms][DEBUG] END runCmdUntilRes#1 in 5748 ms [2025-08-25 14:55:57][358475771799204][6104 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:56:03][356298585273378][0 ms][INFO] === Request start === [2025-08-25 14:56:03][356298585273378][1 ms][DEBUG] START check_scloud [2025-08-25 14:56:03][356298585273378][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:56:03][356298585273378][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 21816 5013 23965296 136820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:56:03][356298585273378][306 ms][DEBUG] targetPkg: running [2025-08-25 14:56:03][356298585273378][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 14:56:03][356298585273378][306 ms][DEBUG] START check_boot_completed [2025-08-25 14:56:03][356298585273378][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:56:04][356298585273378][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:56:04][356298585273378][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:56:04][356298585273378][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:56:04][356298585273378][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:56:04][356298585273378][399 ms][DEBUG] START check_internet [2025-08-25 14:56:04][356298585273378][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:56:04][356298585273378][915 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.891/203.891/203.891/0.000 ms\n [2025-08-25 14:56:04][356298585273378][915 ms][DEBUG] check_internet: online [2025-08-25 14:56:04][356298585273378][915 ms][DEBUG] END check_internet in 516 ms [2025-08-25 14:56:04][356298585273378][915 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:56:04][356298585273378][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356298585273378\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6167\"}'\'' -e'"" [2025-08-25 14:56:04][356298585273378][915 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:56:04][356298585273378][916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356298585273378\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6167\"}'\'' -e'"" [2025-08-25 14:56:08][356298585273378][4523 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-25 14:56:08][356298585273378][4680 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=101 [2025-08-25 14:56:08][356298585273378][4680 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-25 14:56:08][356298585273378][4680 ms][INFO] SUCCESS response from frida (len=101) [2025-08-25 14:56:08][][0 ms][INFO] === Request start === [2025-08-25 14:56:08][][1 ms][DEBUG] START check_scloud [2025-08-25 14:56:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:56:09][][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 21816 5013 24101460 148592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:56:09][][299 ms][DEBUG] targetPkg: running [2025-08-25 14:56:09][][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 14:56:09][][299 ms][DEBUG] START check_boot_completed [2025-08-25 14:56:09][][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:56:09][][344 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 14:56:09][][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:56:09][][422 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 14:56:09][][422 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-25 14:56:09][][422 ms][DEBUG] START check_internet [2025-08-25 14:56:09][][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:56:09][][687 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.977/142.977/142.977/0.000 ms\n [2025-08-25 14:56:09][][687 ms][DEBUG] check_internet: online [2025-08-25 14:56:09][][687 ms][DEBUG] END check_internet in 265 ms [2025-08-25 14:56:09][][687 ms][DEBUG] rawBody.length=1129 [2025-08-25 14:56:09][][687 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY12W5K2M\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4506\"}'\'' -e'"" [2025-08-25 14:56:09][][687 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:56:09][][687 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY12W5K2M\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4506\"}'\'' -e'"" [2025-08-25 14:56:12][][4140 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-25 14:56:12][][4296 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=101 [2025-08-25 14:56:12][][4296 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-25 14:56:12][][4296 ms][INFO] SUCCESS response from frida (len=101) [2025-08-25 14:56:15][356298585273378][0 ms][INFO] === Request start === [2025-08-25 14:56:15][356298585273378][1 ms][DEBUG] START check_scloud [2025-08-25 14:56:15][356298585273378][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:56:15][356298585273378][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 21816 5013 24143304 159892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:56:15][356298585273378][322 ms][DEBUG] targetPkg: running [2025-08-25 14:56:15][356298585273378][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-25 14:56:15][356298585273378][322 ms][DEBUG] START check_boot_completed [2025-08-25 14:56:15][356298585273378][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:56:15][356298585273378][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:56:15][356298585273378][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:56:15][356298585273378][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 14:56:15][356298585273378][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 14:56:15][356298585273378][431 ms][DEBUG] START check_internet [2025-08-25 14:56:15][356298585273378][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:56:15][356298585273378][712 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.785/144.785/144.785/0.000 ms\n [2025-08-25 14:56:15][356298585273378][712 ms][DEBUG] check_internet: online [2025-08-25 14:56:15][356298585273378][712 ms][DEBUG] END check_internet in 281 ms [2025-08-25 14:56:15][356298585273378][712 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:56:15][356298585273378][713 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356298585273378\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8192\"}'\'' -e'"" [2025-08-25 14:56:15][356298585273378][713 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:56:15][356298585273378][713 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356298585273378\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8192\"}'\'' -e'"" [2025-08-25 14:56:24][356298585273378][9554 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e53d420-ca67-42ef-bd71-759d08f9ed58","id":"QR_9e53d420-ca67-42ef-bd71-759d08f9ed58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:56:24][356298585273378][9710 ms][DEBUG] proc_open done in 8997 ms; code=255; res.len=3343 [2025-08-25 14:56:24][356298585273378][9710 ms][DEBUG] END runCmdUntilRes#1 in 8997 ms [2025-08-25 14:56:24][356298585273378][9710 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:56:29][351877472961198][0 ms][INFO] === Request start === [2025-08-25 14:56:29][351877472961198][1 ms][DEBUG] START check_scloud [2025-08-25 14:56:29][351877472961198][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:56:30][351877472961198][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 21816 5013 24248968 171040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:56:30][351877472961198][297 ms][DEBUG] targetPkg: running [2025-08-25 14:56:30][351877472961198][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 14:56:30][351877472961198][297 ms][DEBUG] START check_boot_completed [2025-08-25 14:56:30][351877472961198][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:56:30][351877472961198][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:56:30][351877472961198][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:56:30][351877472961198][391 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 14:56:30][351877472961198][391 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 14:56:30][351877472961198][391 ms][DEBUG] START check_internet [2025-08-25 14:56:30][351877472961198][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 14:56:30][351877472961198][672 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.144/164.144/164.144/0.000 ms\n [2025-08-25 14:56:30][351877472961198][672 ms][DEBUG] check_internet: online [2025-08-25 14:56:30][351877472961198][672 ms][DEBUG] END check_internet in 281 ms [2025-08-25 14:56:30][351877472961198][672 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:56:30][351877472961198][672 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472961198\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5111\"}'\'' -e'"" [2025-08-25 14:56:30][351877472961198][672 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:56:30][351877472961198][672 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472961198\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5111\"}'\'' -e'"" [2025-08-25 14:56:34][351877472961198][4842 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_719a0ac6-6f14-405b-a9c6-5f59dccb34a8","id":"QR_719a0ac6-6f14-405b-a9c6-5f59dccb34a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:56:34][351877472961198][4999 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-25 14:56:34][351877472961198][4999 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-25 14:56:34][351877472961198][4999 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:57:03][350250410143348][0 ms][INFO] === Request start === [2025-08-25 14:57:03][350250410143348][1 ms][DEBUG] START check_scloud [2025-08-25 14:57:03][350250410143348][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:57:04][350250410143348][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 21816 5013 24339976 182644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:57:04][350250410143348][314 ms][DEBUG] targetPkg: running [2025-08-25 14:57:04][350250410143348][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 14:57:04][350250410143348][314 ms][DEBUG] START check_boot_completed [2025-08-25 14:57:04][350250410143348][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:57:04][350250410143348][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:57:04][350250410143348][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:57:04][350250410143348][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:57:04][350250410143348][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:57:04][350250410143348][407 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:57:04][350250410143348][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250410143348\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8191\"}'\'' -e'"" [2025-08-25 14:57:04][350250410143348][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:57:04][350250410143348][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250410143348\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8191\"}'\'' -e'"" [2025-08-25 14:57:08][350250410143348][4484 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81b0e11d-9df7-4a30-9613-8d527cba5d97","id":"QR_81b0e11d-9df7-4a30-9613-8d527cba5d97","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:57:08][350250410143348][4641 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 14:57:08][350250410143348][4641 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 14:57:08][350250410143348][4641 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 14:59:06][350274357034435][1 ms][INFO] === Request start === [2025-08-25 14:59:06][350274357034435][1 ms][DEBUG] START check_scloud [2025-08-25 14:59:06][350274357034435][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:59:06][350274357034435][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 21816 5013 24469024 194020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:59:06][350274357034435][304 ms][DEBUG] targetPkg: running [2025-08-25 14:59:06][350274357034435][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 14:59:06][350274357034435][304 ms][DEBUG] START check_boot_completed [2025-08-25 14:59:06][350274357034435][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:59:07][350274357034435][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 14:59:07][350274357034435][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:59:07][350274357034435][384 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 14:59:07][350274357034435][384 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-25 14:59:07][350274357034435][384 ms][DEBUG] rawBody.length=1149 [2025-08-25 14:59:07][350274357034435][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274357034435\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2302\"}'\'' -e'"" [2025-08-25 14:59:07][350274357034435][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:59:07][350274357034435][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274357034435\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2302\"}'\'' -e'"" [2025-08-25 14:59:11][350274357034435][5116 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 14:59:11][350274357034435][5272 ms][DEBUG] proc_open done in 4887 ms; code=255; res.len=107 [2025-08-25 14:59:11][350274357034435][5272 ms][DEBUG] END runCmdUntilRes#1 in 4887 ms [2025-08-25 14:59:11][350274357034435][5272 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 14:59:12][][0 ms][INFO] === Request start === [2025-08-25 14:59:12][][1 ms][DEBUG] START check_scloud [2025-08-25 14:59:12][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:59:12][][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 21816 5013 24646312 204792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:59:12][][306 ms][DEBUG] targetPkg: running [2025-08-25 14:59:12][][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 14:59:12][][306 ms][DEBUG] START check_boot_completed [2025-08-25 14:59:12][][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:59:12][][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 14:59:12][][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:59:12][][416 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 14:59:12][][416 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 14:59:12][][416 ms][DEBUG] rawBody.length=1130 [2025-08-25 14:59:12][][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8RC0HL1CB\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9557\"}'\'' -e'"" [2025-08-25 14:59:12][][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:59:12][][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8RC0HL1CB\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9557\"}'\'' -e'"" [2025-08-25 14:59:17][][5679 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 14:59:18][][5835 ms][DEBUG] proc_open done in 5419 ms; code=255; res.len=107 [2025-08-25 14:59:18][][5835 ms][DEBUG] END runCmdUntilRes#1 in 5419 ms [2025-08-25 14:59:18][][5836 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 14:59:19][350274357034435][0 ms][INFO] === Request start === [2025-08-25 14:59:19][350274357034435][1 ms][DEBUG] START check_scloud [2025-08-25 14:59:19][350274357034435][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 14:59:19][350274357034435][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 21816 5013 24799088 215200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 14:59:19][350274357034435][310 ms][DEBUG] targetPkg: running [2025-08-25 14:59:19][350274357034435][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 14:59:19][350274357034435][311 ms][DEBUG] START check_boot_completed [2025-08-25 14:59:19][350274357034435][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 14:59:19][350274357034435][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 14:59:19][350274357034435][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 14:59:19][350274357034435][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 14:59:19][350274357034435][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 14:59:19][350274357034435][404 ms][DEBUG] rawBody.length=1148 [2025-08-25 14:59:19][350274357034435][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274357034435\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3613\"}'\'' -e'"" [2025-08-25 14:59:19][350274357034435][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 14:59:19][350274357034435][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274357034435\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3613\"}'\'' -e'"" [2025-08-25 14:59:23][350274357034435][4387 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8936ef2-f22e-491a-bec1-68e7a6d174e5","id":"QR_c8936ef2-f22e-491a-bec1-68e7a6d174e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 14:59:23][350274357034435][4543 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-25 14:59:23][350274357034435][4544 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-08-25 14:59:23][350274357034435][4544 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:00:05][355163180038082][0 ms][INFO] === Request start === [2025-08-25 15:00:05][355163180038082][1 ms][DEBUG] START check_scloud [2025-08-25 15:00:05][355163180038082][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:00:05][355163180038082][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 21816 5013 24934312 227172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:00:05][355163180038082][304 ms][DEBUG] targetPkg: running [2025-08-25 15:00:05][355163180038082][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 15:00:05][355163180038082][304 ms][DEBUG] START check_boot_completed [2025-08-25 15:00:05][355163180038082][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:00:05][355163180038082][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:00:05][355163180038082][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:00:05][355163180038082][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:00:05][355163180038082][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:00:05][355163180038082][398 ms][DEBUG] START check_internet [2025-08-25 15:00:05][355163180038082][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:00:05][355163180038082][882 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.900/202.900/202.900/0.000 ms\n [2025-08-25 15:00:05][355163180038082][882 ms][DEBUG] check_internet: online [2025-08-25 15:00:05][355163180038082][882 ms][DEBUG] END check_internet in 484 ms [2025-08-25 15:00:05][355163180038082][882 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:00:05][355163180038082][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355163180038082\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1850\"}'\'' -e'"" [2025-08-25 15:00:05][355163180038082][882 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:00:05][355163180038082][882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355163180038082\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1850\"}'\'' -e'"" [2025-08-25 15:00:11][355163180038082][6459 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa69a432-2aca-45d8-9c47-03136de52315","id":"QR_aa69a432-2aca-45d8-9c47-03136de52315","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:00:11][355163180038082][6615 ms][DEBUG] proc_open done in 5733 ms; code=255; res.len=3343 [2025-08-25 15:00:11][355163180038082][6615 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-08-25 15:00:11][355163180038082][6615 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:00:16][352674520334208][0 ms][INFO] === Request start === [2025-08-25 15:00:16][352674520334208][1 ms][DEBUG] START check_scloud [2025-08-25 15:00:16][352674520334208][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:00:16][352674520334208][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 21816 5013 25074864 238368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:00:16][352674520334208][315 ms][DEBUG] targetPkg: running [2025-08-25 15:00:16][352674520334208][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 15:00:16][352674520334208][315 ms][DEBUG] START check_boot_completed [2025-08-25 15:00:16][352674520334208][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:00:16][352674520334208][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:00:16][352674520334208][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:00:17][352674520334208][424 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 15:00:17][352674520334208][425 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 15:00:17][352674520334208][425 ms][DEBUG] START check_internet [2025-08-25 15:00:17][352674520334208][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:00:17][352674520334208][783 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.672/227.672/227.672/0.000 ms\n [2025-08-25 15:00:17][352674520334208][783 ms][DEBUG] check_internet: online [2025-08-25 15:00:17][352674520334208][783 ms][DEBUG] END check_internet in 359 ms [2025-08-25 15:00:17][352674520334208][783 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:00:17][352674520334208][783 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520334208\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3904\"}'\'' -e'"" [2025-08-25 15:00:17][352674520334208][783 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:00:17][352674520334208][783 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520334208\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3904\"}'\'' -e'"" [2025-08-25 15:00:21][352674520334208][4501 ms][DEBUG] proc_open done in 3717 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 15:00:21][352674520334208][4501 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-08-25 15:00:21][352674520334208][4501 ms][WARN] Detected error: Process with pid 21816 either refused to load frida-agent, or terminated during injection [2025-08-25 15:00:21][352674520334208][4501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 15:00:21][352674520334208][4657 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 15:00:21][352674520334208][4657 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 15:00:21][352674520334208][4657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 15:00:21][352674520334208][4813 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 15:00:21][352674520334208][4814 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 15:00:21][352674520334208][4970 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 15:00:23][352674520334208][6985 ms][DEBUG] START check_boot_completed [2025-08-25 15:00:23][352674520334208][6985 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:00:23][352674520334208][7032 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:00:23][352674520334208][7032 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:00:23][352674520334208][7079 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:00:23][352674520334208][7079 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:00:26][352674520334208][10093 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 15:00:26][352674520334208][10093 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520334208\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3904\"}'\'' -e'"" [2025-08-25 15:00:30][352674520334208][14077 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c586f165-3254-4575-8f7d-39ed77393250","id":"QR_c586f165-3254-4575-8f7d-39ed77393250","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:00:30][352674520334208][14233 ms][DEBUG] proc_open done in 4140 ms; code=255; res.len=3343 [2025-08-25 15:00:30][352674520334208][14233 ms][DEBUG] END runCmdUntilRes#2 in 4140 ms [2025-08-25 15:00:30][352674520334208][14233 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:01:03][353475128093934][0 ms][INFO] === Request start === [2025-08-25 15:01:03][353475128093934][1 ms][DEBUG] START check_scloud [2025-08-25 15:01:03][353475128093934][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:01:04][353475128093934][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 23032 5013 23777748 127144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:01:04][353475128093934][311 ms][DEBUG] targetPkg: running [2025-08-25 15:01:04][353475128093934][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 15:01:04][353475128093934][311 ms][DEBUG] START check_boot_completed [2025-08-25 15:01:04][353475128093934][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:01:04][353475128093934][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:01:04][353475128093934][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:01:04][353475128093934][406 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 15:01:04][353475128093934][406 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 15:01:04][353475128093934][406 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:01:04][353475128093934][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475128093934\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9515\"}'\'' -e'"" [2025-08-25 15:01:04][353475128093934][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:01:04][353475128093934][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475128093934\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9515\"}'\'' -e'"" [2025-08-25 15:01:08][353475128093934][4373 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39fef68a-8320-41a4-ae16-42d2553057f1","id":"QR_39fef68a-8320-41a4-ae16-42d2553057f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:01:08][353475128093934][4529 ms][DEBUG] proc_open done in 4122 ms; code=255; res.len=3343 [2025-08-25 15:01:08][353475128093934][4529 ms][DEBUG] END runCmdUntilRes#1 in 4122 ms [2025-08-25 15:01:08][353475128093934][4529 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:03:05][351317842428511][1 ms][INFO] === Request start === [2025-08-25 15:03:05][351317842428511][1 ms][DEBUG] START check_scloud [2025-08-25 15:03:05][351317842428511][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:03:05][351317842428511][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 23032 5013 23928200 137700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:03:05][351317842428511][308 ms][DEBUG] targetPkg: running [2025-08-25 15:03:05][351317842428511][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 15:03:05][351317842428511][308 ms][DEBUG] START check_boot_completed [2025-08-25 15:03:05][351317842428511][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:03:05][351317842428511][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:03:05][351317842428511][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:03:05][351317842428511][402 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 15:03:05][351317842428511][403 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 15:03:05][351317842428511][403 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:03:05][351317842428511][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317842428511\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"L15\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9261\"}'\'' -e'"" [2025-08-25 15:03:05][351317842428511][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:03:05][351317842428511][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317842428511\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"L15\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9261\"}'\'' -e'"" [2025-08-25 15:03:10][351317842428511][5525 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a78d47c-20a5-452f-ac40-807de013e6fe","id":"QR_7a78d47c-20a5-452f-ac40-807de013e6fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:03:10][351317842428511][5681 ms][DEBUG] proc_open done in 5278 ms; code=255; res.len=3343 [2025-08-25 15:03:10][351317842428511][5681 ms][DEBUG] END runCmdUntilRes#1 in 5278 ms [2025-08-25 15:03:10][351317842428511][5681 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:03:15][356663822507492][0 ms][INFO] === Request start === [2025-08-25 15:03:15][356663822507492][1 ms][DEBUG] START check_scloud [2025-08-25 15:03:15][356663822507492][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:03:16][356663822507492][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 23032 5013 24076880 149324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:03:16][356663822507492][298 ms][DEBUG] targetPkg: running [2025-08-25 15:03:16][356663822507492][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 15:03:16][356663822507492][298 ms][DEBUG] START check_boot_completed [2025-08-25 15:03:16][356663822507492][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:03:16][356663822507492][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:03:16][356663822507492][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:03:16][356663822507492][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:03:16][356663822507492][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:03:16][356663822507492][392 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:03:16][356663822507492][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663822507492\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1835\"}'\'' -e'"" [2025-08-25 15:03:16][356663822507492][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:03:16][356663822507492][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663822507492\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1835\"}'\'' -e'"" [2025-08-25 15:03:20][356663822507492][4546 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_858ccee9-c53b-4e87-9543-813373d96e29","id":"QR_858ccee9-c53b-4e87-9543-813373d96e29","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:03:20][356663822507492][4703 ms][DEBUG] proc_open done in 4310 ms; code=255; res.len=3343 [2025-08-25 15:03:20][356663822507492][4703 ms][DEBUG] END runCmdUntilRes#1 in 4310 ms [2025-08-25 15:03:20][356663822507492][4703 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:04:03][352397453754966][0 ms][INFO] === Request start === [2025-08-25 15:04:03][352397453754966][1 ms][DEBUG] START check_scloud [2025-08-25 15:04:03][352397453754966][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:04:04][352397453754966][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 23032 5013 24219344 160440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:04:04][352397453754966][308 ms][DEBUG] targetPkg: running [2025-08-25 15:04:04][352397453754966][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 15:04:04][352397453754966][308 ms][DEBUG] START check_boot_completed [2025-08-25 15:04:04][352397453754966][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:04:04][352397453754966][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:04:04][352397453754966][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:04:04][352397453754966][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:04:04][352397453754966][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:04:04][352397453754966][417 ms][DEBUG] START check_internet [2025-08-25 15:04:04][352397453754966][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:04:04][352397453754966][762 ms][DEBUG] SU: done in 345 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.597/234.597/234.597/0.000 ms\n [2025-08-25 15:04:04][352397453754966][762 ms][DEBUG] check_internet: online [2025-08-25 15:04:04][352397453754966][762 ms][DEBUG] END check_internet in 345 ms [2025-08-25 15:04:04][352397453754966][763 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:04:04][352397453754966][763 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453754966\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8546\"}'\'' -e'"" [2025-08-25 15:04:04][352397453754966][763 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:04:04][352397453754966][763 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453754966\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8546\"}'\'' -e'"" [2025-08-25 15:04:08][352397453754966][4385 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 15:04:08][352397453754966][4541 ms][DEBUG] proc_open done in 3778 ms; code=255; res.len=115 [2025-08-25 15:04:08][352397453754966][4541 ms][DEBUG] END runCmdUntilRes#1 in 3778 ms [2025-08-25 15:04:08][352397453754966][4541 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 15:04:08][][0 ms][INFO] === Request start === [2025-08-25 15:04:08][][1 ms][DEBUG] START check_scloud [2025-08-25 15:04:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:04:08][][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 23032 5013 24345560 172280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:04:08][][314 ms][DEBUG] targetPkg: running [2025-08-25 15:04:08][][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 15:04:08][][314 ms][DEBUG] START check_boot_completed [2025-08-25 15:04:08][][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:04:09][][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:04:09][][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:04:09][][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:04:09][][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:04:09][][408 ms][DEBUG] START check_internet [2025-08-25 15:04:09][][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:04:09][][658 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.182/146.182/146.182/0.000 ms\n [2025-08-25 15:04:09][][658 ms][DEBUG] check_internet: online [2025-08-25 15:04:09][][658 ms][DEBUG] END check_internet in 250 ms [2025-08-25 15:04:09][][658 ms][DEBUG] rawBody.length=1129 [2025-08-25 15:04:09][][658 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W20AKTTP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6269\"}'\'' -e'"" [2025-08-25 15:04:09][][658 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:04:09][][658 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W20AKTTP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6269\"}'\'' -e'"" [2025-08-25 15:04:13][][4422 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 15:04:13][][4579 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=115 [2025-08-25 15:04:13][][4579 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-25 15:04:13][][4579 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 15:04:15][352397453754966][0 ms][INFO] === Request start === [2025-08-25 15:04:15][352397453754966][1 ms][DEBUG] START check_scloud [2025-08-25 15:04:15][352397453754966][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:04:15][352397453754966][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 23032 5013 24477792 183104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:04:15][352397453754966][266 ms][DEBUG] targetPkg: running [2025-08-25 15:04:15][352397453754966][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-25 15:04:15][352397453754966][266 ms][DEBUG] START check_boot_completed [2025-08-25 15:04:15][352397453754966][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:04:15][352397453754966][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:04:15][352397453754966][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:04:15][352397453754966][375 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:04:15][352397453754966][376 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:04:15][352397453754966][376 ms][DEBUG] START check_internet [2025-08-25 15:04:15][352397453754966][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:04:15][352397453754966][625 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.404/141.404/141.404/0.000 ms\n [2025-08-25 15:04:15][352397453754966][626 ms][DEBUG] check_internet: online [2025-08-25 15:04:15][352397453754966][626 ms][DEBUG] END check_internet in 250 ms [2025-08-25 15:04:15][352397453754966][626 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:04:15][352397453754966][626 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453754966\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4439\"}'\'' -e'"" [2025-08-25 15:04:15][352397453754966][626 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:04:15][352397453754966][626 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453754966\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4439\"}'\'' -e'"" [2025-08-25 15:04:20][352397453754966][5827 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83d84cb1-c551-452e-a62a-29ebb44a412a","id":"QR_83d84cb1-c551-452e-a62a-29ebb44a412a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:04:21][352397453754966][5983 ms][DEBUG] proc_open done in 5357 ms; code=255; res.len=3343 [2025-08-25 15:04:21][352397453754966][5983 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-08-25 15:04:21][352397453754966][5983 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:04:27][353600815018726][0 ms][INFO] === Request start === [2025-08-25 15:04:27][353600815018726][1 ms][DEBUG] START check_scloud [2025-08-25 15:04:27][353600815018726][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:04:27][353600815018726][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 23032 5013 24632452 194916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:04:27][353600815018726][271 ms][DEBUG] targetPkg: running [2025-08-25 15:04:27][353600815018726][271 ms][DEBUG] END check_scloud in 271 ms [2025-08-25 15:04:27][353600815018726][271 ms][DEBUG] START check_boot_completed [2025-08-25 15:04:27][353600815018726][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:04:27][353600815018726][318 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:04:27][353600815018726][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:04:27][353600815018726][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:04:27][353600815018726][365 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:04:27][353600815018726][365 ms][DEBUG] START check_internet [2025-08-25 15:04:27][353600815018726][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:04:28][353600815018726][677 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.165/193.165/193.165/0.000 ms\n [2025-08-25 15:04:28][353600815018726][678 ms][DEBUG] check_internet: online [2025-08-25 15:04:28][353600815018726][678 ms][DEBUG] END check_internet in 312 ms [2025-08-25 15:04:28][353600815018726][678 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:04:28][353600815018726][678 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600815018726\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5132\"}'\'' -e'"" [2025-08-25 15:04:28][353600815018726][678 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:04:28][353600815018726][678 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600815018726\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5132\"}'\'' -e'"" [2025-08-25 15:04:33][353600815018726][5926 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6de28d7f-3a88-4081-944c-b59292e48fe1","id":"QR_6de28d7f-3a88-4081-944c-b59292e48fe1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:04:33][353600815018726][6082 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-08-25 15:04:33][353600815018726][6082 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-08-25 15:04:33][353600815018726][6082 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:05:04][350318409211648][0 ms][INFO] === Request start === [2025-08-25 15:05:04][350318409211648][1 ms][DEBUG] START check_scloud [2025-08-25 15:05:04][350318409211648][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:05:05][350318409211648][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 23032 5013 24760480 206188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:05:05][350318409211648][314 ms][DEBUG] targetPkg: running [2025-08-25 15:05:05][350318409211648][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 15:05:05][350318409211648][314 ms][DEBUG] START check_boot_completed [2025-08-25 15:05:05][350318409211648][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:05:05][350318409211648][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:05:05][350318409211648][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:05:05][350318409211648][424 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 15:05:05][350318409211648][424 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 15:05:05][350318409211648][424 ms][DEBUG] rawBody.length=1150 [2025-08-25 15:05:05][350318409211648][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350318409211648\",\"model\":\"SM-S156VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1156\"}'\'' -e'"" [2025-08-25 15:05:05][350318409211648][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:05:05][350318409211648][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350318409211648\",\"model\":\"SM-S156VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1156\"}'\'' -e'"" [2025-08-25 15:05:12][350318409211648][7327 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a14f801d-0f9a-4075-a6df-a9c8b5b0488a","id":"QR_a14f801d-0f9a-4075-a6df-a9c8b5b0488a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:05:12][350318409211648][7484 ms][DEBUG] proc_open done in 7059 ms; code=255; res.len=3343 [2025-08-25 15:05:12][350318409211648][7484 ms][DEBUG] END runCmdUntilRes#1 in 7059 ms [2025-08-25 15:05:12][350318409211648][7484 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:05:17][352501917416779][1 ms][INFO] === Request start === [2025-08-25 15:05:17][352501917416779][1 ms][DEBUG] START check_scloud [2025-08-25 15:05:17][352501917416779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:05:18][352501917416779][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 23032 5013 24894760 217168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:05:18][352501917416779][300 ms][DEBUG] targetPkg: running [2025-08-25 15:05:18][352501917416779][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 15:05:18][352501917416779][300 ms][DEBUG] START check_boot_completed [2025-08-25 15:05:18][352501917416779][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:05:18][352501917416779][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:05:18][352501917416779][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:05:18][352501917416779][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:05:18][352501917416779][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:05:18][352501917416779][394 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:05:18][352501917416779][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501917416779\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6590\"}'\'' -e'"" [2025-08-25 15:05:18][352501917416779][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:05:18][352501917416779][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501917416779\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6590\"}'\'' -e'"" [2025-08-25 15:05:22][352501917416779][4596 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_147eb937-12dd-41eb-a2ce-f9f736019020","id":"QR_147eb937-12dd-41eb-a2ce-f9f736019020","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:05:22][352501917416779][4752 ms][DEBUG] proc_open done in 4357 ms; code=255; res.len=3343 [2025-08-25 15:05:22][352501917416779][4752 ms][DEBUG] END runCmdUntilRes#1 in 4357 ms [2025-08-25 15:05:22][352501917416779][4752 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:06:05][350948900869930][0 ms][INFO] === Request start === [2025-08-25 15:06:05][350948900869930][1 ms][DEBUG] START check_scloud [2025-08-25 15:06:05][350948900869930][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:06:05][350948900869930][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 23032 5013 25025000 229576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:06:05][350948900869930][301 ms][DEBUG] targetPkg: running [2025-08-25 15:06:05][350948900869930][301 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 15:06:05][350948900869930][301 ms][DEBUG] START check_boot_completed [2025-08-25 15:06:05][350948900869930][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:06:05][350948900869930][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:06:05][350948900869930][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:06:05][350948900869930][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:06:05][350948900869930][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 15:06:05][350948900869930][379 ms][DEBUG] START check_internet [2025-08-25 15:06:05][350948900869930][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:06:05][350948900869930][817 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.408/201.408/201.408/0.000 ms\n [2025-08-25 15:06:05][350948900869930][817 ms][DEBUG] check_internet: online [2025-08-25 15:06:05][350948900869930][817 ms][DEBUG] END check_internet in 438 ms [2025-08-25 15:06:05][350948900869930][817 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:06:05][350948900869930][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350948900869930\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4996\"}'\'' -e'"" [2025-08-25 15:06:05][350948900869930][817 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:06:05][350948900869930][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350948900869930\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4996\"}'\'' -e'"" [2025-08-25 15:06:10][350948900869930][5659 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d842158d-98f1-47c2-ab72-c9e6f79b6a6b","id":"QR_d842158d-98f1-47c2-ab72-c9e6f79b6a6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:06:10][350948900869930][5815 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-25 15:06:10][350948900869930][5815 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-25 15:06:10][350948900869930][5816 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:06:17][356522911143603][0 ms][INFO] === Request start === [2025-08-25 15:06:17][356522911143603][1 ms][DEBUG] START check_scloud [2025-08-25 15:06:17][356522911143603][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:06:17][356522911143603][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 23032 5013 25206512 241704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:06:17][356522911143603][303 ms][DEBUG] targetPkg: running [2025-08-25 15:06:17][356522911143603][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 15:06:17][356522911143603][304 ms][DEBUG] START check_boot_completed [2025-08-25 15:06:17][356522911143603][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:06:17][356522911143603][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:06:17][356522911143603][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:06:17][356522911143603][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:06:17][356522911143603][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:06:17][356522911143603][397 ms][DEBUG] START check_internet [2025-08-25 15:06:17][356522911143603][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:06:17][356522911143603][709 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.111/202.111/202.111/0.000 ms\n [2025-08-25 15:06:17][356522911143603][710 ms][DEBUG] check_internet: online [2025-08-25 15:06:17][356522911143603][710 ms][DEBUG] END check_internet in 313 ms [2025-08-25 15:06:17][356522911143603][710 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:06:17][356522911143603][710 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356522911143603\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2963\"}'\'' -e'"" [2025-08-25 15:06:17][356522911143603][710 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:06:17][356522911143603][710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356522911143603\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2963\"}'\'' -e'"" [2025-08-25 15:06:21][356522911143603][4349 ms][DEBUG] proc_open done in 3639 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 15:06:21][356522911143603][4349 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-25 15:06:21][356522911143603][4349 ms][WARN] Detected error: Process with pid 23032 either refused to load frida-agent, or terminated during injection [2025-08-25 15:06:21][356522911143603][4349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 15:06:21][356522911143603][4505 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 15:06:21][356522911143603][4506 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 15:06:21][356522911143603][4506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 15:06:21][356522911143603][4646 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 15:06:21][356522911143603][4646 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 15:06:21][356522911143603][4802 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 15:06:23][356522911143603][6817 ms][DEBUG] START check_boot_completed [2025-08-25 15:06:23][356522911143603][6817 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:06:23][356522911143603][6864 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:06:23][356522911143603][6864 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:06:23][356522911143603][6911 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:06:23][356522911143603][6911 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:06:26][356522911143603][9926 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 15:06:26][356522911143603][9926 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356522911143603\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2963\"}'\'' -e'"" [2025-08-25 15:06:31][356522911143603][14440 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43d57f61-e7ff-473a-97ae-8d8c9058bbeb","id":"QR_43d57f61-e7ff-473a-97ae-8d8c9058bbeb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:06:31][356522911143603][14597 ms][DEBUG] proc_open done in 4671 ms; code=255; res.len=3343 [2025-08-25 15:06:31][356522911143603][14597 ms][DEBUG] END runCmdUntilRes#2 in 4671 ms [2025-08-25 15:06:31][356522911143603][14597 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:07:03][350142323721981][0 ms][INFO] === Request start === [2025-08-25 15:07:03][350142323721981][1 ms][DEBUG] START check_scloud [2025-08-25 15:07:03][350142323721981][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:07:04][350142323721981][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 24595 5013 23763220 126964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:07:04][350142323721981][314 ms][DEBUG] targetPkg: running [2025-08-25 15:07:04][350142323721981][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 15:07:04][350142323721981][314 ms][DEBUG] START check_boot_completed [2025-08-25 15:07:04][350142323721981][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:07:04][350142323721981][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:07:04][350142323721981][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:07:04][350142323721981][409 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 15:07:04][350142323721981][409 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 15:07:04][350142323721981][409 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:07:04][350142323721981][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142323721981\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2157\"}'\'' -e'"" [2025-08-25 15:07:04][350142323721981][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:07:04][350142323721981][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142323721981\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2157\"}'\'' -e'"" [2025-08-25 15:07:08][350142323721981][4594 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e1fae0c-6fd8-42a1-aecf-25b41ab12965","id":"QR_1e1fae0c-6fd8-42a1-aecf-25b41ab12965","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:07:08][350142323721981][4750 ms][DEBUG] proc_open done in 4341 ms; code=255; res.len=3343 [2025-08-25 15:07:08][350142323721981][4750 ms][DEBUG] END runCmdUntilRes#1 in 4341 ms [2025-08-25 15:07:08][350142323721981][4750 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:08:04][350481562953115][1 ms][INFO] === Request start === [2025-08-25 15:08:04][350481562953115][1 ms][DEBUG] START check_scloud [2025-08-25 15:08:04][350481562953115][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:08:05][350481562953115][294 ms][DEBUG] SU: done in 292 ms; outu0_a118 24595 5013 23915768 137172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:08:05][350481562953115][294 ms][DEBUG] targetPkg: running [2025-08-25 15:08:05][350481562953115][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-25 15:08:05][350481562953115][294 ms][DEBUG] START check_boot_completed [2025-08-25 15:08:05][350481562953115][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:08:05][350481562953115][340 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:08:05][350481562953115][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:08:05][350481562953115][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:08:05][350481562953115][387 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:08:05][350481562953115][388 ms][DEBUG] START check_internet [2025-08-25 15:08:05][350481562953115][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:08:05][350481562953115][653 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=158 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 158.611/158.611/158.611/0.000 ms\n [2025-08-25 15:08:05][350481562953115][653 ms][DEBUG] check_internet: online [2025-08-25 15:08:05][350481562953115][653 ms][DEBUG] END check_internet in 266 ms [2025-08-25 15:08:05][350481562953115][653 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:08:05][350481562953115][653 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481562953115\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9904\"}'\'' -e'"" [2025-08-25 15:08:05][350481562953115][654 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:08:05][350481562953115][654 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481562953115\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9904\"}'\'' -e'"" [2025-08-25 15:08:11][350481562953115][6526 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2387e797-a92e-463d-9522-88398a1ceff1","id":"QR_2387e797-a92e-463d-9522-88398a1ceff1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:08:11][350481562953115][6683 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-08-25 15:08:11][350481562953115][6683 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-08-25 15:08:11][350481562953115][6683 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:09:03][359044476880104][0 ms][INFO] === Request start === [2025-08-25 15:09:03][359044476880104][1 ms][DEBUG] START check_scloud [2025-08-25 15:09:03][359044476880104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:09:03][359044476880104][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 24595 5013 24005904 149080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:09:03][359044476880104][313 ms][DEBUG] targetPkg: running [2025-08-25 15:09:03][359044476880104][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 15:09:03][359044476880104][313 ms][DEBUG] START check_boot_completed [2025-08-25 15:09:03][359044476880104][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:09:03][359044476880104][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:09:03][359044476880104][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:09:03][359044476880104][453 ms][DEBUG] SU: done in 93 ms; out [2025-08-25 15:09:03][359044476880104][453 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 15:09:03][359044476880104][453 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:09:03][359044476880104][453 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359044476880104\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7070\"}'\'' -e'"" [2025-08-25 15:09:03][359044476880104][453 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:09:03][359044476880104][453 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359044476880104\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7070\"}'\'' -e'"" [2025-08-25 15:09:07][359044476880104][4624 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3af63cb9-44c7-4e76-a143-1858c5c1c331","id":"QR_3af63cb9-44c7-4e76-a143-1858c5c1c331","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:09:08][359044476880104][4780 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-25 15:09:08][359044476880104][4780 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-25 15:09:08][359044476880104][4780 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:10:03][357450476188194][0 ms][INFO] === Request start === [2025-08-25 15:10:03][357450476188194][0 ms][DEBUG] START check_scloud [2025-08-25 15:10:03][357450476188194][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:10:04][357450476188194][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 24595 5013 24115636 160196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:10:04][357450476188194][305 ms][DEBUG] targetPkg: running [2025-08-25 15:10:04][357450476188194][305 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 15:10:04][357450476188194][305 ms][DEBUG] START check_boot_completed [2025-08-25 15:10:04][357450476188194][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:10:04][357450476188194][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:10:04][357450476188194][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:10:04][357450476188194][446 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 15:10:04][357450476188194][446 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 15:10:04][357450476188194][446 ms][DEBUG] START check_internet [2025-08-25 15:10:04][357450476188194][446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:10:04][357450476188194][961 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.844/200.844/200.844/0.000 ms\n [2025-08-25 15:10:04][357450476188194][962 ms][DEBUG] check_internet: online [2025-08-25 15:10:04][357450476188194][962 ms][DEBUG] END check_internet in 516 ms [2025-08-25 15:10:04][357450476188194][962 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:10:04][357450476188194][962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450476188194\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4837\"}'\'' -e'"" [2025-08-25 15:10:04][357450476188194][962 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:10:04][357450476188194][962 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450476188194\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4837\"}'\'' -e'"" [2025-08-25 15:10:08][357450476188194][4976 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb7fa50b-b240-42ed-b4b0-d3ddd8ffc57c","id":"QR_fb7fa50b-b240-42ed-b4b0-d3ddd8ffc57c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:10:08][357450476188194][5132 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-25 15:10:08][357450476188194][5132 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-25 15:10:08][357450476188194][5132 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:10:11][350896160585672][1 ms][INFO] === Request start === [2025-08-25 15:10:11][350896160585672][1 ms][DEBUG] START check_scloud [2025-08-25 15:10:11][350896160585672][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:10:11][350896160585672][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 24595 5013 24254076 172024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:10:11][350896160585672][303 ms][DEBUG] targetPkg: running [2025-08-25 15:10:11][350896160585672][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 15:10:11][350896160585672][303 ms][DEBUG] START check_boot_completed [2025-08-25 15:10:11][350896160585672][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:10:11][350896160585672][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:10:11][350896160585672][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:10:11][350896160585672][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:10:11][350896160585672][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:10:11][350896160585672][397 ms][DEBUG] START check_internet [2025-08-25 15:10:11][350896160585672][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:10:12][350896160585672][740 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.209/239.209/239.209/0.000 ms\n [2025-08-25 15:10:12][350896160585672][741 ms][DEBUG] check_internet: online [2025-08-25 15:10:12][350896160585672][741 ms][DEBUG] END check_internet in 344 ms [2025-08-25 15:10:12][350896160585672][741 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:10:12][350896160585672][741 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896160585672\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3655\"}'\'' -e'"" [2025-08-25 15:10:12][350896160585672][741 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:10:12][350896160585672][741 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896160585672\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3655\"}'\'' -e'"" [2025-08-25 15:10:16][350896160585672][5036 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_87deb93c-0c07-4e31-a9e2-ced4abdd39ad","id":"QR_87deb93c-0c07-4e31-a9e2-ced4abdd39ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:10:16][350896160585672][5192 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-08-25 15:10:16][350896160585672][5192 ms][DEBUG] END runCmdUntilRes#1 in 4451 ms [2025-08-25 15:10:16][350896160585672][5192 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:14:03][352060488519693][1 ms][INFO] === Request start === [2025-08-25 15:14:03][352060488519693][1 ms][DEBUG] START check_scloud [2025-08-25 15:14:03][352060488519693][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:14:04][352060488519693][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 24595 5013 24393560 183432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:14:04][352060488519693][317 ms][DEBUG] targetPkg: running [2025-08-25 15:14:04][352060488519693][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 15:14:04][352060488519693][318 ms][DEBUG] START check_boot_completed [2025-08-25 15:14:04][352060488519693][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:14:04][352060488519693][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:14:04][352060488519693][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:14:04][352060488519693][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:14:04][352060488519693][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:14:04][352060488519693][411 ms][DEBUG] START check_internet [2025-08-25 15:14:04][352060488519693][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:14:04][352060488519693][677 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=147 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 147.525/147.525/147.525/0.000 ms\n [2025-08-25 15:14:04][352060488519693][677 ms][DEBUG] check_internet: online [2025-08-25 15:14:04][352060488519693][677 ms][DEBUG] END check_internet in 266 ms [2025-08-25 15:14:04][352060488519693][677 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:14:04][352060488519693][677 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488519693\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5237\"}'\'' -e'"" [2025-08-25 15:14:04][352060488519693][677 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:14:04][352060488519693][677 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488519693\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5237\"}'\'' -e'"" [2025-08-25 15:14:08][352060488519693][4426 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee175a30-07c1-499c-893d-0432fcafcca3","id":"QR_ee175a30-07c1-499c-893d-0432fcafcca3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:14:08][352060488519693][4582 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=3343 [2025-08-25 15:14:08][352060488519693][4582 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 15:14:08][352060488519693][4582 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:15:05][353996962029957][1 ms][INFO] === Request start === [2025-08-25 15:15:05][353996962029957][1 ms][DEBUG] START check_scloud [2025-08-25 15:15:05][353996962029957][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:15:05][353996962029957][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 24595 5013 24517692 194744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:15:05][353996962029957][278 ms][DEBUG] targetPkg: running [2025-08-25 15:15:05][353996962029957][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-25 15:15:05][353996962029957][278 ms][DEBUG] START check_boot_completed [2025-08-25 15:15:05][353996962029957][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:15:05][353996962029957][325 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:15:05][353996962029957][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:15:05][353996962029957][387 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:15:05][353996962029957][387 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:15:05][353996962029957][388 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:15:05][353996962029957][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353996962029957\",\"model\":\"SM-T505\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5506\"}'\'' -e'"" [2025-08-25 15:15:05][353996962029957][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:15:05][353996962029957][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353996962029957\",\"model\":\"SM-T505\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5506\"}'\'' -e'"" [2025-08-25 15:15:10][353996962029957][5558 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d71aabd-e869-45c0-9f65-388f2fa8027f","id":"QR_4d71aabd-e869-45c0-9f65-388f2fa8027f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:15:10][353996962029957][5714 ms][DEBUG] proc_open done in 5326 ms; code=255; res.len=3343 [2025-08-25 15:15:10][353996962029957][5714 ms][DEBUG] END runCmdUntilRes#1 in 5326 ms [2025-08-25 15:15:10][353996962029957][5714 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:18:03][357042144661205][1 ms][INFO] === Request start === [2025-08-25 15:18:03][357042144661205][1 ms][DEBUG] START check_scloud [2025-08-25 15:18:03][357042144661205][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:18:04][357042144661205][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 24595 5013 24629408 206432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:18:04][357042144661205][295 ms][DEBUG] targetPkg: running [2025-08-25 15:18:04][357042144661205][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-25 15:18:04][357042144661205][295 ms][DEBUG] START check_boot_completed [2025-08-25 15:18:04][357042144661205][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:18:04][357042144661205][340 ms][DEBUG] ADB: done in 44 ms; out [2025-08-25 15:18:04][357042144661205][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:18:04][357042144661205][388 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 15:18:04][357042144661205][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:18:04][357042144661205][388 ms][DEBUG] START check_internet [2025-08-25 15:18:04][357042144661205][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:18:04][357042144661205][840 ms][DEBUG] SU: done in 451 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.991/200.991/200.991/0.000 ms\n [2025-08-25 15:18:04][357042144661205][840 ms][DEBUG] check_internet: online [2025-08-25 15:18:04][357042144661205][840 ms][DEBUG] END check_internet in 452 ms [2025-08-25 15:18:04][357042144661205][840 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:18:04][357042144661205][840 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042144661205\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8923\"}'\'' -e'"" [2025-08-25 15:18:04][357042144661205][840 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:18:04][357042144661205][840 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042144661205\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8923\"}'\'' -e'"" [2025-08-25 15:18:08][357042144661205][4776 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce0c1cfc-b31f-4aab-866e-47db23649c91","id":"QR_ce0c1cfc-b31f-4aab-866e-47db23649c91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:18:08][357042144661205][4932 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-25 15:18:08][357042144661205][4932 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-25 15:18:08][357042144661205][4932 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:18:11][354130546006724][0 ms][INFO] === Request start === [2025-08-25 15:18:11][354130546006724][1 ms][DEBUG] START check_scloud [2025-08-25 15:18:11][354130546006724][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:18:11][354130546006724][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 24595 5013 24800680 217028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:18:11][354130546006724][316 ms][DEBUG] targetPkg: running [2025-08-25 15:18:11][354130546006724][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 15:18:11][354130546006724][316 ms][DEBUG] START check_boot_completed [2025-08-25 15:18:11][354130546006724][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:18:11][354130546006724][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:18:11][354130546006724][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:18:11][354130546006724][456 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 15:18:11][354130546006724][456 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 15:18:11][354130546006724][456 ms][DEBUG] START check_internet [2025-08-25 15:18:11][354130546006724][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:18:12][354130546006724][737 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.219/142.219/142.219/0.000 ms\n [2025-08-25 15:18:12][354130546006724][738 ms][DEBUG] check_internet: online [2025-08-25 15:18:12][354130546006724][738 ms][DEBUG] END check_internet in 281 ms [2025-08-25 15:18:12][354130546006724][738 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:18:12][354130546006724][738 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130546006724\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5395\"}'\'' -e'"" [2025-08-25 15:18:12][354130546006724][738 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:18:12][354130546006724][738 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130546006724\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5395\"}'\'' -e'"" [2025-08-25 15:18:15][354130546006724][4440 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea541b97-6375-4169-8115-e9ded4b1ebdf","id":"QR_ea541b97-6375-4169-8115-e9ded4b1ebdf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:18:15][354130546006724][4596 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-25 15:18:15][354130546006724][4596 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 15:18:15][354130546006724][4596 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:18:19][357728795646939][0 ms][INFO] === Request start === [2025-08-25 15:18:19][357728795646939][1 ms][DEBUG] START check_scloud [2025-08-25 15:18:19][357728795646939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:18:19][357728795646939][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 24595 5013 24955568 228888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:18:19][357728795646939][310 ms][DEBUG] targetPkg: running [2025-08-25 15:18:19][357728795646939][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 15:18:19][357728795646939][310 ms][DEBUG] START check_boot_completed [2025-08-25 15:18:19][357728795646939][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:18:20][357728795646939][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:18:20][357728795646939][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:18:20][357728795646939][419 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 15:18:20][357728795646939][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:18:20][357728795646939][419 ms][DEBUG] START check_internet [2025-08-25 15:18:20][357728795646939][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:18:20][357728795646939][731 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.199/190.199/190.199/0.000 ms\n [2025-08-25 15:18:20][357728795646939][732 ms][DEBUG] check_internet: online [2025-08-25 15:18:20][357728795646939][732 ms][DEBUG] END check_internet in 312 ms [2025-08-25 15:18:20][357728795646939][732 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:18:20][357728795646939][732 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357728795646939\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3792\"}'\'' -e'"" [2025-08-25 15:18:20][357728795646939][732 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:18:20][357728795646939][732 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357728795646939\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3792\"}'\'' -e'"" [2025-08-25 15:18:27][357728795646939][7355 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e45e08a7-59e1-488c-b82e-9bd1495b256c","id":"QR_e45e08a7-59e1-488c-b82e-9bd1495b256c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:18:27][357728795646939][7511 ms][DEBUG] proc_open done in 6779 ms; code=255; res.len=3343 [2025-08-25 15:18:27][357728795646939][7511 ms][DEBUG] END runCmdUntilRes#1 in 6779 ms [2025-08-25 15:18:27][357728795646939][7511 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:19:03][352397452431715][0 ms][INFO] === Request start === [2025-08-25 15:19:03][352397452431715][1 ms][DEBUG] START check_scloud [2025-08-25 15:19:03][352397452431715][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:19:03][352397452431715][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 24595 5013 25048912 240192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:19:03][352397452431715][298 ms][DEBUG] targetPkg: running [2025-08-25 15:19:03][352397452431715][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 15:19:03][352397452431715][298 ms][DEBUG] START check_boot_completed [2025-08-25 15:19:03][352397452431715][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:19:03][352397452431715][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:19:03][352397452431715][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:19:03][352397452431715][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:19:03][352397452431715][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:19:03][352397452431715][407 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:19:03][352397452431715][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452431715\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2516\"}'\'' -e'"" [2025-08-25 15:19:03][352397452431715][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:19:03][352397452431715][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452431715\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2516\"}'\'' -e'"" [2025-08-25 15:19:07][352397452431715][4094 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 15:19:07][352397452431715][4094 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-25 15:19:07][352397452431715][4094 ms][WARN] Detected error: Process with pid 24595 either refused to load frida-agent, or terminated during injection [2025-08-25 15:19:07][352397452431715][4094 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 15:19:07][352397452431715][4234 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 15:19:07][352397452431715][4234 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 15:19:07][352397452431715][4234 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 15:19:07][352397452431715][4375 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 15:19:07][352397452431715][4375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 15:19:07][352397452431715][4515 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 15:19:09][352397452431715][6530 ms][DEBUG] START check_boot_completed [2025-08-25 15:19:09][352397452431715][6530 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:19:09][352397452431715][6577 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:19:09][352397452431715][6577 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:19:09][352397452431715][6624 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:19:09][352397452431715][6624 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:19:12][352397452431715][9639 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 15:19:12][352397452431715][9639 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452431715\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2516\"}'\'' -e'"" [2025-08-25 15:19:16][352397452431715][13529 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4aed5f4-9475-4da3-bdc1-8246fc728b17","id":"QR_b4aed5f4-9475-4da3-bdc1-8246fc728b17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:19:16][352397452431715][13685 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-25 15:19:16][352397452431715][13685 ms][DEBUG] END runCmdUntilRes#2 in 4046 ms [2025-08-25 15:19:16][352397452431715][13685 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:19:46][356006101804869][1 ms][INFO] === Request start === [2025-08-25 15:19:46][356006101804869][1 ms][DEBUG] START check_scloud [2025-08-25 15:19:46][356006101804869][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:19:47][356006101804869][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 25967 5013 23761876 126968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:19:47][356006101804869][291 ms][DEBUG] targetPkg: running [2025-08-25 15:19:47][356006101804869][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-25 15:19:47][356006101804869][291 ms][DEBUG] START check_boot_completed [2025-08-25 15:19:47][356006101804869][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:19:47][356006101804869][337 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 15:19:47][356006101804869][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:19:47][356006101804869][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:19:47][356006101804869][383 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 15:19:47][356006101804869][383 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:19:47][356006101804869][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356006101804869\",\"model\":\"SM-A705W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6384\"}'\'' -e'"" [2025-08-25 15:19:47][356006101804869][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:19:47][356006101804869][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356006101804869\",\"model\":\"SM-A705W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6384\"}'\'' -e'"" [2025-08-25 15:19:52][356006101804869][6038 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b511500a-f690-4be5-bd07-5370dc8c855c","id":"QR_b511500a-f690-4be5-bd07-5370dc8c855c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:19:53][356006101804869][6194 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=3343 [2025-08-25 15:19:53][356006101804869][6194 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-08-25 15:19:53][356006101804869][6194 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:20:04][350247873953049][0 ms][INFO] === Request start === [2025-08-25 15:20:04][350247873953049][1 ms][DEBUG] START check_scloud [2025-08-25 15:20:04][350247873953049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:20:04][350247873953049][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 25967 5013 23889172 137780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:20:04][350247873953049][305 ms][DEBUG] targetPkg: running [2025-08-25 15:20:04][350247873953049][305 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 15:20:04][350247873953049][306 ms][DEBUG] START check_boot_completed [2025-08-25 15:20:04][350247873953049][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:20:04][350247873953049][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:20:04][350247873953049][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:20:04][350247873953049][400 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 15:20:04][350247873953049][400 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 15:20:04][350247873953049][401 ms][DEBUG] START check_internet [2025-08-25 15:20:04][350247873953049][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:20:04][350247873953049][899 ms][DEBUG] SU: done in 498 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.739/200.739/200.739/0.000 ms\n [2025-08-25 15:20:04][350247873953049][899 ms][DEBUG] check_internet: online [2025-08-25 15:20:04][350247873953049][899 ms][DEBUG] END check_internet in 498 ms [2025-08-25 15:20:04][350247873953049][899 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:20:04][350247873953049][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247873953049\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6935\"}'\'' -e'"" [2025-08-25 15:20:04][350247873953049][899 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:20:04][350247873953049][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247873953049\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6935\"}'\'' -e'"" [2025-08-25 15:20:08][350247873953049][4804 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ed8ed4a-3f7f-45e1-8cda-a6a25126ea03","id":"QR_6ed8ed4a-3f7f-45e1-8cda-a6a25126ea03","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:20:09][350247873953049][4960 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-25 15:20:09][350247873953049][4960 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-25 15:20:09][350247873953049][4960 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:20:11][350599271188853][0 ms][INFO] === Request start === [2025-08-25 15:20:11][350599271188853][1 ms][DEBUG] START check_scloud [2025-08-25 15:20:11][350599271188853][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:20:12][350599271188853][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 25967 5013 24031544 148996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:20:12][350599271188853][280 ms][DEBUG] targetPkg: running [2025-08-25 15:20:12][350599271188853][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-25 15:20:12][350599271188853][280 ms][DEBUG] START check_boot_completed [2025-08-25 15:20:12][350599271188853][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:20:12][350599271188853][326 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:20:12][350599271188853][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:20:12][350599271188853][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:20:12][350599271188853][373 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:20:12][350599271188853][373 ms][DEBUG] START check_internet [2025-08-25 15:20:12][350599271188853][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:20:12][350599271188853][733 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=251 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 251.074/251.074/251.074/0.000 ms\n [2025-08-25 15:20:12][350599271188853][733 ms][DEBUG] check_internet: online [2025-08-25 15:20:12][350599271188853][733 ms][DEBUG] END check_internet in 360 ms [2025-08-25 15:20:12][350599271188853][733 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:20:12][350599271188853][733 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350599271188853\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5378\"}'\'' -e'"" [2025-08-25 15:20:12][350599271188853][733 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:20:12][350599271188853][733 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350599271188853\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5378\"}'\'' -e'"" [2025-08-25 15:20:17][350599271188853][5669 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5074efa7-62df-4ad8-aac8-b3b2a7016446","id":"QR_5074efa7-62df-4ad8-aac8-b3b2a7016446","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:20:17][350599271188853][5825 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-08-25 15:20:17][350599271188853][5825 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-08-25 15:20:17][350599271188853][5825 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:20:22][353628423922351][0 ms][INFO] === Request start === [2025-08-25 15:20:22][353628423922351][1 ms][DEBUG] START check_scloud [2025-08-25 15:20:22][353628423922351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:20:22][353628423922351][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 25967 5013 24195456 159956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:20:22][353628423922351][321 ms][DEBUG] targetPkg: running [2025-08-25 15:20:22][353628423922351][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-25 15:20:22][353628423922351][321 ms][DEBUG] START check_boot_completed [2025-08-25 15:20:22][353628423922351][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:20:22][353628423922351][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:20:22][353628423922351][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:20:22][353628423922351][430 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:20:22][353628423922351][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:20:22][353628423922351][430 ms][DEBUG] START check_internet [2025-08-25 15:20:22][353628423922351][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:20:23][353628423922351][805 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=267 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 267.620/267.620/267.620/0.000 ms\n [2025-08-25 15:20:23][353628423922351][805 ms][DEBUG] check_internet: online [2025-08-25 15:20:23][353628423922351][805 ms][DEBUG] END check_internet in 375 ms [2025-08-25 15:20:23][353628423922351][805 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:20:23][353628423922351][806 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628423922351\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1177\"}'\'' -e'"" [2025-08-25 15:20:23][353628423922351][806 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:20:23][353628423922351][806 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628423922351\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1177\"}'\'' -e'"" [2025-08-25 15:20:27][353628423922351][4913 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1bd2600-b2b9-448d-a675-39c6e6710290","id":"QR_b1bd2600-b2b9-448d-a675-39c6e6710290","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:20:27][353628423922351][5070 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 15:20:27][353628423922351][5070 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 15:20:27][353628423922351][5070 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:20:29][355195300626776][0 ms][INFO] === Request start === [2025-08-25 15:20:29][355195300626776][1 ms][DEBUG] START check_scloud [2025-08-25 15:20:29][355195300626776][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:20:30][355195300626776][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 25967 5013 24337892 171812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:20:30][355195300626776][306 ms][DEBUG] targetPkg: running [2025-08-25 15:20:30][355195300626776][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 15:20:30][355195300626776][306 ms][DEBUG] START check_boot_completed [2025-08-25 15:20:30][355195300626776][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:20:30][355195300626776][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:20:30][355195300626776][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:20:30][355195300626776][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:20:30][355195300626776][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:20:30][355195300626776][400 ms][DEBUG] START check_internet [2025-08-25 15:20:30][355195300626776][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:20:30][355195300626776][790 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=286 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 286.983/286.983/286.983/0.000 ms\n [2025-08-25 15:20:30][355195300626776][790 ms][DEBUG] check_internet: online [2025-08-25 15:20:30][355195300626776][790 ms][DEBUG] END check_internet in 391 ms [2025-08-25 15:20:30][355195300626776][790 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:20:30][355195300626776][791 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195300626776\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6210\"}'\'' -e'"" [2025-08-25 15:20:30][355195300626776][791 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:20:30][355195300626776][791 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195300626776\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6210\"}'\'' -e'"" [2025-08-25 15:20:34][355195300626776][4617 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ce37f00-8575-4975-ae84-39fb72932491","id":"QR_6ce37f00-8575-4975-ae84-39fb72932491","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:20:34][355195300626776][4773 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-25 15:20:34][355195300626776][4774 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 15:20:34][355195300626776][4774 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:21:04][350471129861026][0 ms][INFO] === Request start === [2025-08-25 15:21:04][350471129861026][1 ms][DEBUG] START check_scloud [2025-08-25 15:21:04][350471129861026][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:21:04][350471129861026][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 25967 5013 24414848 183008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:21:04][350471129861026][298 ms][DEBUG] targetPkg: running [2025-08-25 15:21:04][350471129861026][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 15:21:04][350471129861026][298 ms][DEBUG] START check_boot_completed [2025-08-25 15:21:04][350471129861026][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:21:04][350471129861026][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:21:04][350471129861026][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:21:04][350471129861026][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:21:04][350471129861026][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:21:04][350471129861026][408 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:21:04][350471129861026][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471129861026\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6853\"}'\'' -e'"" [2025-08-25 15:21:04][350471129861026][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:21:04][350471129861026][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471129861026\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6853\"}'\'' -e'"" [2025-08-25 15:21:08][350471129861026][4375 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ce86423-13e2-475d-860d-55ad16bebae2","id":"QR_0ce86423-13e2-475d-860d-55ad16bebae2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:21:08][350471129861026][4531 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-25 15:21:08][350471129861026][4531 ms][DEBUG] END runCmdUntilRes#1 in 4123 ms [2025-08-25 15:21:08][350471129861026][4531 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:23:03][357962508580222][1 ms][INFO] === Request start === [2025-08-25 15:23:03][357962508580222][1 ms][DEBUG] START check_scloud [2025-08-25 15:23:03][357962508580222][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:23:03][357962508580222][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 25967 5013 24547992 194944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:23:03][357962508580222][304 ms][DEBUG] targetPkg: running [2025-08-25 15:23:03][357962508580222][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 15:23:03][357962508580222][304 ms][DEBUG] START check_boot_completed [2025-08-25 15:23:03][357962508580222][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:23:04][357962508580222][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:23:04][357962508580222][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:23:04][357962508580222][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:23:04][357962508580222][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 15:23:04][357962508580222][383 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:23:04][357962508580222][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508580222\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6536\"}'\'' -e'"" [2025-08-25 15:23:04][357962508580222][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:23:04][357962508580222][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508580222\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6536\"}'\'' -e'"" [2025-08-25 15:23:08][357962508580222][4491 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38761cd5-9b7d-4868-bee7-614fcc9d4674","id":"QR_38761cd5-9b7d-4868-bee7-614fcc9d4674","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:23:08][357962508580222][4647 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 15:23:08][357962508580222][4647 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 15:23:08][357962508580222][4647 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:23:10][350042738649001][0 ms][INFO] === Request start === [2025-08-25 15:23:10][350042738649001][1 ms][DEBUG] START check_scloud [2025-08-25 15:23:10][350042738649001][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:23:11][350042738649001][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 25967 5013 24696224 205856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:23:11][350042738649001][270 ms][DEBUG] targetPkg: running [2025-08-25 15:23:11][350042738649001][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-25 15:23:11][350042738649001][270 ms][DEBUG] START check_boot_completed [2025-08-25 15:23:11][350042738649001][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:23:11][350042738649001][317 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:23:11][350042738649001][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:23:11][350042738649001][365 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 15:23:11][350042738649001][365 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 15:23:11][350042738649001][365 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:23:11][350042738649001][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042738649001\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8434\"}'\'' -e'"" [2025-08-25 15:23:11][350042738649001][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:23:11][350042738649001][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042738649001\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8434\"}'\'' -e'"" [2025-08-25 15:23:15][350042738649001][4191 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28d8d00a-1d68-47bf-a07d-086ebaef5335","id":"QR_28d8d00a-1d68-47bf-a07d-086ebaef5335","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:23:15][350042738649001][4347 ms][DEBUG] proc_open done in 3982 ms; code=255; res.len=3343 [2025-08-25 15:23:15][350042738649001][4347 ms][DEBUG] END runCmdUntilRes#1 in 3982 ms [2025-08-25 15:23:15][350042738649001][4347 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:25:03][352600228952793][1 ms][INFO] === Request start === [2025-08-25 15:25:03][352600228952793][1 ms][DEBUG] START check_scloud [2025-08-25 15:25:03][352600228952793][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:25:04][352600228952793][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 25967 5013 24825468 218156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:25:04][352600228952793][302 ms][DEBUG] targetPkg: running [2025-08-25 15:25:04][352600228952793][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 15:25:04][352600228952793][302 ms][DEBUG] START check_boot_completed [2025-08-25 15:25:04][352600228952793][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:25:04][352600228952793][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:25:04][352600228952793][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:25:04][352600228952793][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:25:04][352600228952793][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:25:04][352600228952793][411 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:25:04][352600228952793][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228952793\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1941\"}'\'' -e'"" [2025-08-25 15:25:04][352600228952793][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:25:04][352600228952793][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228952793\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1941\"}'\'' -e'"" [2025-08-25 15:25:08][352600228952793][4441 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c27ee9a1-0df6-4335-88ab-f594e698af43","id":"QR_c27ee9a1-0df6-4335-88ab-f594e698af43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:25:08][352600228952793][4597 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 15:25:08][352600228952793][4597 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 15:25:08][352600228952793][4597 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:26:03][354321590314953][1 ms][INFO] === Request start === [2025-08-25 15:26:03][354321590314953][1 ms][DEBUG] START check_scloud [2025-08-25 15:26:03][354321590314953][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:26:04][354321590314953][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 25967 5013 24984288 229236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:26:04][354321590314953][282 ms][DEBUG] targetPkg: running [2025-08-25 15:26:04][354321590314953][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-25 15:26:04][354321590314953][282 ms][DEBUG] START check_boot_completed [2025-08-25 15:26:04][354321590314953][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:26:04][354321590314953][329 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:26:04][354321590314953][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:26:04][354321590314953][391 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:26:04][354321590314953][391 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:26:04][354321590314953][391 ms][DEBUG] START check_internet [2025-08-25 15:26:04][354321590314953][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:26:04][354321590314953][938 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.958/201.958/201.958/0.000 ms\n [2025-08-25 15:26:04][354321590314953][938 ms][DEBUG] check_internet: online [2025-08-25 15:26:04][354321590314953][938 ms][DEBUG] END check_internet in 547 ms [2025-08-25 15:26:04][354321590314953][938 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:26:04][354321590314953][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321590314953\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1549\"}'\'' -e'"" [2025-08-25 15:26:04][354321590314953][938 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:26:04][354321590314953][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321590314953\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1549\"}'\'' -e'"" [2025-08-25 15:26:09][354321590314953][5077 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8983b52e-3e09-4180-817a-70c8fba19d27","id":"QR_8983b52e-3e09-4180-817a-70c8fba19d27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:26:09][354321590314953][5234 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-25 15:26:09][354321590314953][5234 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-25 15:26:09][354321590314953][5234 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:26:11][350040127269043][0 ms][INFO] === Request start === [2025-08-25 15:26:11][350040127269043][1 ms][DEBUG] START check_scloud [2025-08-25 15:26:11][350040127269043][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:26:11][350040127269043][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 25967 5013 25107552 241112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:26:11][350040127269043][310 ms][DEBUG] targetPkg: running [2025-08-25 15:26:11][350040127269043][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 15:26:11][350040127269043][310 ms][DEBUG] START check_boot_completed [2025-08-25 15:26:11][350040127269043][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:26:11][350040127269043][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:26:11][350040127269043][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:26:12][350040127269043][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:26:12][350040127269043][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:26:12][350040127269043][403 ms][DEBUG] START check_internet [2025-08-25 15:26:12][350040127269043][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:26:12][350040127269043][748 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.469/248.469/248.469/0.000 ms\n [2025-08-25 15:26:12][350040127269043][748 ms][DEBUG] check_internet: online [2025-08-25 15:26:12][350040127269043][748 ms][DEBUG] END check_internet in 345 ms [2025-08-25 15:26:12][350040127269043][748 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:26:12][350040127269043][748 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040127269043\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5580\"}'\'' -e'"" [2025-08-25 15:26:12][350040127269043][748 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:26:12][350040127269043][748 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040127269043\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5580\"}'\'' -e'"" [2025-08-25 15:26:15][350040127269043][4355 ms][DEBUG] proc_open done in 3607 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 15:26:15][350040127269043][4355 ms][DEBUG] END runCmdUntilRes#1 in 3607 ms [2025-08-25 15:26:15][350040127269043][4355 ms][WARN] Detected error: Process with pid 25967 either refused to load frida-agent, or terminated during injection [2025-08-25 15:26:15][350040127269043][4355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 15:26:16][350040127269043][4496 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 15:26:16][350040127269043][4496 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 15:26:16][350040127269043][4496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 15:26:16][350040127269043][4621 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 15:26:16][350040127269043][4621 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 15:26:16][350040127269043][4808 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 15:26:18][350040127269043][6823 ms][DEBUG] START check_boot_completed [2025-08-25 15:26:18][350040127269043][6823 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:26:18][350040127269043][6870 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:26:18][350040127269043][6870 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:26:18][350040127269043][6918 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:26:18][350040127269043][6918 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:26:21][350040127269043][9932 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 15:26:21][350040127269043][9932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040127269043\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5580\"}'\'' -e'"" [2025-08-25 15:26:26][350040127269043][14540 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b5679cd4-c64e-4f65-a307-2facb116b313","id":"QR_b5679cd4-c64e-4f65-a307-2facb116b313","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:26:26][350040127269043][14697 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-08-25 15:26:26][350040127269043][14697 ms][DEBUG] END runCmdUntilRes#2 in 4765 ms [2025-08-25 15:26:26][350040127269043][14697 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:26:28][352923540733869][1 ms][INFO] === Request start === [2025-08-25 15:26:28][352923540733869][1 ms][DEBUG] START check_scloud [2025-08-25 15:26:28][352923540733869][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:26:29][352923540733869][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 27247 5013 23880440 124344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:26:29][352923540733869][250 ms][DEBUG] targetPkg: running [2025-08-25 15:26:29][352923540733869][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-25 15:26:29][352923540733869][251 ms][DEBUG] START check_boot_completed [2025-08-25 15:26:29][352923540733869][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:26:29][352923540733869][297 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:26:29][352923540733869][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:26:29][352923540733869][391 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 15:26:29][352923540733869][391 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 15:26:29][352923540733869][391 ms][DEBUG] START check_internet [2025-08-25 15:26:29][352923540733869][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:26:29][352923540733869][703 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.504/189.504/189.504/0.000 ms\n [2025-08-25 15:26:29][352923540733869][704 ms][DEBUG] check_internet: online [2025-08-25 15:26:29][352923540733869][704 ms][DEBUG] END check_internet in 312 ms [2025-08-25 15:26:29][352923540733869][704 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:26:29][352923540733869][704 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923540733869\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9298\"}'\'' -e'"" [2025-08-25 15:26:29][352923540733869][704 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:26:29][352923540733869][704 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923540733869\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9298\"}'\'' -e'"" [2025-08-25 15:26:33][352923540733869][4312 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_584436b8-2c3f-4a5a-9c09-149c671a7c77","id":"QR_584436b8-2c3f-4a5a-9c09-149c671a7c77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:26:33][352923540733869][4468 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-08-25 15:26:33][352923540733869][4468 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-25 15:26:33][352923540733869][4468 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:28:03][353684143580367][0 ms][INFO] === Request start === [2025-08-25 15:28:03][353684143580367][1 ms][DEBUG] START check_scloud [2025-08-25 15:28:03][353684143580367][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:28:04][353684143580367][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 27247 5013 23958036 138360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:28:04][353684143580367][271 ms][DEBUG] targetPkg: running [2025-08-25 15:28:04][353684143580367][271 ms][DEBUG] END check_scloud in 271 ms [2025-08-25 15:28:04][353684143580367][271 ms][DEBUG] START check_boot_completed [2025-08-25 15:28:04][353684143580367][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:28:04][353684143580367][318 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:28:04][353684143580367][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:28:04][353684143580367][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:28:04][353684143580367][365 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:28:04][353684143580367][365 ms][DEBUG] START check_internet [2025-08-25 15:28:04][353684143580367][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:28:04][353684143580367][662 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.812/185.812/185.812/0.000 ms\n [2025-08-25 15:28:04][353684143580367][662 ms][DEBUG] check_internet: online [2025-08-25 15:28:04][353684143580367][662 ms][DEBUG] END check_internet in 297 ms [2025-08-25 15:28:04][353684143580367][662 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:28:04][353684143580367][662 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143580367\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1702\"}'\'' -e'"" [2025-08-25 15:28:04][353684143580367][662 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:28:04][353684143580367][662 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143580367\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1702\"}'\'' -e'"" [2025-08-25 15:28:08][353684143580367][4848 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97ab9506-1e19-4fb9-802a-870094bd9e6d","id":"QR_97ab9506-1e19-4fb9-802a-870094bd9e6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:28:08][353684143580367][5004 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-25 15:28:08][353684143580367][5004 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-25 15:28:08][353684143580367][5004 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:29:03][350013883119058][1 ms][INFO] === Request start === [2025-08-25 15:29:03][350013883119058][1 ms][DEBUG] START check_scloud [2025-08-25 15:29:03][350013883119058][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:29:03][350013883119058][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 27247 5013 24076908 150180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:29:03][350013883119058][305 ms][DEBUG] targetPkg: running [2025-08-25 15:29:03][350013883119058][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 15:29:03][350013883119058][305 ms][DEBUG] START check_boot_completed [2025-08-25 15:29:03][350013883119058][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:29:03][350013883119058][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:29:03][350013883119058][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:29:03][350013883119058][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:29:03][350013883119058][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 15:29:03][350013883119058][383 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:29:03][350013883119058][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883119058\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6542\"}'\'' -e'"" [2025-08-25 15:29:03][350013883119058][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:29:03][350013883119058][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883119058\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6542\"}'\'' -e'"" [2025-08-25 15:29:07][350013883119058][4116 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8dc08ad-dbfc-4805-a9ef-ec6d5b473a34","id":"QR_b8dc08ad-dbfc-4805-a9ef-ec6d5b473a34","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:29:07][350013883119058][4272 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=3343 [2025-08-25 15:29:07][350013883119058][4273 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-25 15:29:07][350013883119058][4273 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:29:11][353684123298063][0 ms][INFO] === Request start === [2025-08-25 15:29:11][353684123298063][0 ms][DEBUG] START check_scloud [2025-08-25 15:29:11][353684123298063][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:29:11][353684123298063][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 27247 5013 24241972 161012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:29:11][353684123298063][288 ms][DEBUG] targetPkg: running [2025-08-25 15:29:11][353684123298063][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-25 15:29:11][353684123298063][288 ms][DEBUG] START check_boot_completed [2025-08-25 15:29:11][353684123298063][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:29:11][353684123298063][334 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:29:11][353684123298063][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:29:11][353684123298063][428 ms][DEBUG] SU: done in 93 ms; out [2025-08-25 15:29:11][353684123298063][428 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 15:29:11][353684123298063][428 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:29:11][353684123298063][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123298063\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6325\"}'\'' -e'"" [2025-08-25 15:29:11][353684123298063][428 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:29:11][353684123298063][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123298063\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6325\"}'\'' -e'"" [2025-08-25 15:29:16][353684123298063][5599 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68b351be-ff3f-4f89-a994-de0b25885ff0","id":"QR_68b351be-ff3f-4f89-a994-de0b25885ff0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:29:16][353684123298063][5755 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-08-25 15:29:16][353684123298063][5755 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-08-25 15:29:16][353684123298063][5755 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:29:22][351843262473752][0 ms][INFO] === Request start === [2025-08-25 15:29:22][351843262473752][1 ms][DEBUG] START check_scloud [2025-08-25 15:29:22][351843262473752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:29:22][351843262473752][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 27247 5013 24370172 172004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:29:22][351843262473752][306 ms][DEBUG] targetPkg: running [2025-08-25 15:29:22][351843262473752][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 15:29:22][351843262473752][306 ms][DEBUG] START check_boot_completed [2025-08-25 15:29:22][351843262473752][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:29:22][351843262473752][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:29:22][351843262473752][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:29:22][351843262473752][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:29:22][351843262473752][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:29:22][351843262473752][399 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:29:22][351843262473752][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351843262473752\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5746\"}'\'' -e'"" [2025-08-25 15:29:22][351843262473752][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:29:22][351843262473752][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351843262473752\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5746\"}'\'' -e'"" [2025-08-25 15:29:26][351843262473752][4414 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67fc9c37-e7ba-4f8a-8e02-c1a4706d4019","id":"QR_67fc9c37-e7ba-4f8a-8e02-c1a4706d4019","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:29:26][351843262473752][4570 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-25 15:29:26][351843262473752][4570 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-25 15:29:26][351843262473752][4570 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:31:03][352483849833100][0 ms][INFO] === Request start === [2025-08-25 15:31:03][352483849833100][1 ms][DEBUG] START check_scloud [2025-08-25 15:31:03][352483849833100][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:31:04][352483849833100][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 27247 5013 24498328 184360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:31:04][352483849833100][324 ms][DEBUG] targetPkg: running [2025-08-25 15:31:04][352483849833100][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-25 15:31:04][352483849833100][324 ms][DEBUG] START check_boot_completed [2025-08-25 15:31:04][352483849833100][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:31:04][352483849833100][371 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:31:04][352483849833100][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:31:04][352483849833100][419 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 15:31:04][352483849833100][419 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 15:31:04][352483849833100][419 ms][DEBUG] rawBody.length=1147 [2025-08-25 15:31:04][352483849833100][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352483849833100\",\"model\":\"SM-X115\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2959\"}'\'' -e'"" [2025-08-25 15:31:04][352483849833100][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:31:04][352483849833100][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352483849833100\",\"model\":\"SM-X115\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2959\"}'\'' -e'"" [2025-08-25 15:31:08][352483849833100][4776 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f7d3199-0900-4867-a931-7d28186a5290","id":"QR_2f7d3199-0900-4867-a931-7d28186a5290","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:31:08][352483849833100][4932 ms][DEBUG] proc_open done in 4513 ms; code=255; res.len=3343 [2025-08-25 15:31:08][352483849833100][4932 ms][DEBUG] END runCmdUntilRes#1 in 4513 ms [2025-08-25 15:31:08][352483849833100][4932 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:31:11][353341125330473][1 ms][INFO] === Request start === [2025-08-25 15:31:11][353341125330473][1 ms][DEBUG] START check_scloud [2025-08-25 15:31:11][353341125330473][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:31:11][353341125330473][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 27247 5013 24645024 195600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:31:11][353341125330473][300 ms][DEBUG] targetPkg: running [2025-08-25 15:31:11][353341125330473][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 15:31:11][353341125330473][300 ms][DEBUG] START check_boot_completed [2025-08-25 15:31:11][353341125330473][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:31:11][353341125330473][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:31:11][353341125330473][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:31:11][353341125330473][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:31:11][353341125330473][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 15:31:11][353341125330473][378 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:31:11][353341125330473][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353341125330473\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2511\"}'\'' -e'"" [2025-08-25 15:31:11][353341125330473][378 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:31:11][353341125330473][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353341125330473\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2511\"}'\'' -e'"" [2025-08-25 15:31:15][353341125330473][4221 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b374df98-8cee-46bd-8414-98e01525b67f","id":"QR_b374df98-8cee-46bd-8414-98e01525b67f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:31:15][353341125330473][4377 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-08-25 15:31:15][353341125330473][4377 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-25 15:31:15][353341125330473][4377 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:31:18][352927940621038][0 ms][INFO] === Request start === [2025-08-25 15:31:18][352927940621038][1 ms][DEBUG] START check_scloud [2025-08-25 15:31:18][352927940621038][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:31:18][352927940621038][286 ms][DEBUG] SU: done in 286 ms; outu0_a118 27247 5013 24787496 207308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:31:18][352927940621038][286 ms][DEBUG] targetPkg: running [2025-08-25 15:31:18][352927940621038][286 ms][DEBUG] END check_scloud in 286 ms [2025-08-25 15:31:18][352927940621038][286 ms][DEBUG] START check_boot_completed [2025-08-25 15:31:18][352927940621038][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:31:18][352927940621038][318 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:31:18][352927940621038][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:31:18][352927940621038][380 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 15:31:18][352927940621038][380 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:31:18][352927940621038][380 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:31:18][352927940621038][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927940621038\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7536\"}'\'' -e'"" [2025-08-25 15:31:18][352927940621038][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:31:18][352927940621038][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927940621038\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7536\"}'\'' -e'"" [2025-08-25 15:31:22][352927940621038][4098 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f5d2916-a693-4fad-8793-4967cbb129df","id":"QR_2f5d2916-a693-4fad-8793-4967cbb129df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:31:22][352927940621038][4254 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-25 15:31:22][352927940621038][4254 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-25 15:31:22][352927940621038][4254 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:35:31][355170560492136][1 ms][INFO] === Request start === [2025-08-25 15:35:31][355170560492136][1 ms][DEBUG] START check_scloud [2025-08-25 15:35:31][355170560492136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:35:31][355170560492136][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 27247 5013 24876612 217956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:35:31][355170560492136][307 ms][DEBUG] targetPkg: running [2025-08-25 15:35:31][355170560492136][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 15:35:31][355170560492136][307 ms][DEBUG] START check_boot_completed [2025-08-25 15:35:31][355170560492136][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:35:31][355170560492136][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:35:31][355170560492136][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:35:32][355170560492136][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:35:32][355170560492136][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 15:35:32][355170560492136][385 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:35:32][355170560492136][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6011\"}'\'' -e'"" [2025-08-25 15:35:32][355170560492136][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:35:32][355170560492136][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6011\"}'\'' -e'"" [2025-08-25 15:35:39][355170560492136][7665 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-25 15:35:39][355170560492136][7821 ms][DEBUG] proc_open done in 7435 ms; code=255; res.len=101 [2025-08-25 15:35:39][355170560492136][7821 ms][DEBUG] END runCmdUntilRes#1 in 7435 ms [2025-08-25 15:35:39][355170560492136][7821 ms][INFO] SUCCESS response from frida (len=101) [2025-08-25 15:35:39][][0 ms][INFO] === Request start === [2025-08-25 15:35:39][][1 ms][DEBUG] START check_scloud [2025-08-25 15:35:39][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:35:40][][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 27247 5013 25011920 229652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:35:40][][320 ms][DEBUG] targetPkg: running [2025-08-25 15:35:40][][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-25 15:35:40][][320 ms][DEBUG] START check_boot_completed [2025-08-25 15:35:40][][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:35:40][][367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:35:40][][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:35:40][][429 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:35:40][][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:35:40][][429 ms][DEBUG] rawBody.length=1130 [2025-08-25 15:35:40][][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8649\"}'\'' -e'"" [2025-08-25 15:35:40][][430 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:35:40][][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8649\"}'\'' -e'"" [2025-08-25 15:35:43][][4116 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-25 15:35:44][][4272 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=101 [2025-08-25 15:35:44][][4272 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-25 15:35:44][][4272 ms][INFO] SUCCESS response from frida (len=101) [2025-08-25 15:35:44][355170560492136][0 ms][INFO] === Request start === [2025-08-25 15:35:44][355170560492136][1 ms][DEBUG] START check_scloud [2025-08-25 15:35:44][355170560492136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:35:45][355170560492136][281 ms][DEBUG] SU: done in 281 ms; outu0_a118 27247 5013 25183192 240500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:35:45][355170560492136][281 ms][DEBUG] targetPkg: running [2025-08-25 15:35:45][355170560492136][281 ms][DEBUG] END check_scloud in 281 ms [2025-08-25 15:35:45][355170560492136][281 ms][DEBUG] START check_boot_completed [2025-08-25 15:35:45][355170560492136][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:35:45][355170560492136][312 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:35:45][355170560492136][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:35:45][355170560492136][375 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 15:35:45][355170560492136][375 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:35:45][355170560492136][375 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:35:45][355170560492136][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8296\"}'\'' -e'"" [2025-08-25 15:35:45][355170560492136][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:35:45][355170560492136][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8296\"}'\'' -e'"" [2025-08-25 15:35:48][355170560492136][4077 ms][DEBUG] proc_open done in 3702 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 15:35:48][355170560492136][4077 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-25 15:35:48][355170560492136][4077 ms][WARN] Detected error: Process with pid 27247 either refused to load frida-agent, or terminated during injection [2025-08-25 15:35:48][355170560492136][4077 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 15:35:49][355170560492136][4218 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 15:35:49][355170560492136][4218 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 15:35:49][355170560492136][4218 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 15:35:49][355170560492136][4343 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 15:35:49][355170560492136][4343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 15:35:49][355170560492136][4499 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 15:35:51][355170560492136][6514 ms][DEBUG] START check_boot_completed [2025-08-25 15:35:51][355170560492136][6514 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:35:51][355170560492136][6561 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:35:51][355170560492136][6561 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:35:51][355170560492136][6624 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:35:51][355170560492136][6624 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 15:35:54][355170560492136][9638 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 15:35:54][355170560492136][9638 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8296\"}'\'' -e'"" [2025-08-25 15:35:58][355170560492136][13278 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 15:35:58][355170560492136][13434 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=107 [2025-08-25 15:35:58][355170560492136][13434 ms][DEBUG] END runCmdUntilRes#2 in 3796 ms [2025-08-25 15:35:58][355170560492136][13434 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 15:35:58][][0 ms][INFO] === Request start === [2025-08-25 15:35:58][][1 ms][DEBUG] START check_scloud [2025-08-25 15:35:58][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:35:58][][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 29316 5013 23805176 123528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:35:58][][261 ms][DEBUG] targetPkg: running [2025-08-25 15:35:58][][261 ms][DEBUG] END check_scloud in 261 ms [2025-08-25 15:35:58][][261 ms][DEBUG] START check_boot_completed [2025-08-25 15:35:58][][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:35:58][][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:35:58][][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:35:58][][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:35:58][][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:35:58][][355 ms][DEBUG] rawBody.length=1129 [2025-08-25 15:35:58][][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7318\"}'\'' -e'"" [2025-08-25 15:35:58][][355 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:35:58][][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7318\"}'\'' -e'"" [2025-08-25 15:36:02][][3620 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 15:36:02][][3776 ms][DEBUG] proc_open done in 3421 ms; code=255; res.len=107 [2025-08-25 15:36:02][][3776 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-08-25 15:36:02][][3776 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 15:36:30][355170560492136][0 ms][INFO] === Request start === [2025-08-25 15:36:30][355170560492136][1 ms][DEBUG] START check_scloud [2025-08-25 15:36:30][355170560492136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:36:31][355170560492136][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 29316 5013 23855572 137068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:36:31][355170560492136][322 ms][DEBUG] targetPkg: running [2025-08-25 15:36:31][355170560492136][322 ms][DEBUG] END check_scloud in 322 ms [2025-08-25 15:36:31][355170560492136][322 ms][DEBUG] START check_boot_completed [2025-08-25 15:36:31][355170560492136][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:36:31][355170560492136][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:36:31][355170560492136][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:36:31][355170560492136][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:36:31][355170560492136][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:36:31][355170560492136][416 ms][DEBUG] START check_internet [2025-08-25 15:36:31][355170560492136][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:36:31][355170560492136][916 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.534/200.534/200.534/0.000 ms\n [2025-08-25 15:36:31][355170560492136][916 ms][DEBUG] check_internet: online [2025-08-25 15:36:31][355170560492136][916 ms][DEBUG] END check_internet in 500 ms [2025-08-25 15:36:31][355170560492136][916 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:36:31][355170560492136][916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1526\"}'\'' -e'"" [2025-08-25 15:36:31][355170560492136][916 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:36:31][355170560492136][916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1526\"}'\'' -e'"" [2025-08-25 15:36:35][355170560492136][4946 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-25 15:36:36][355170560492136][5102 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=101 [2025-08-25 15:36:36][355170560492136][5102 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 15:36:36][355170560492136][5102 ms][INFO] SUCCESS response from frida (len=101) [2025-08-25 15:36:36][][0 ms][INFO] === Request start === [2025-08-25 15:36:36][][1 ms][DEBUG] START check_scloud [2025-08-25 15:36:36][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:36:36][][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 29316 5013 24020572 148732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:36:36][][308 ms][DEBUG] targetPkg: running [2025-08-25 15:36:36][][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 15:36:36][][309 ms][DEBUG] START check_boot_completed [2025-08-25 15:36:36][][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:36:36][][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:36:36][][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:36:36][][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:36:36][][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 15:36:36][][387 ms][DEBUG] START check_internet [2025-08-25 15:36:36][][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:36:37][][636 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.163/149.163/149.163/0.000 ms\n [2025-08-25 15:36:37][][637 ms][DEBUG] check_internet: online [2025-08-25 15:36:37][][637 ms][DEBUG] END check_internet in 250 ms [2025-08-25 15:36:37][][637 ms][DEBUG] rawBody.length=1130 [2025-08-25 15:36:37][][637 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1038\"}'\'' -e'"" [2025-08-25 15:36:37][][637 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:36:37][][637 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1038\"}'\'' -e'"" [2025-08-25 15:36:41][][4823 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-25 15:36:41][][4979 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=101 [2025-08-25 15:36:41][][4979 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-25 15:36:41][][4979 ms][INFO] SUCCESS response from frida (len=101) [2025-08-25 15:36:42][355170560492136][0 ms][INFO] === Request start === [2025-08-25 15:36:42][355170560492136][1 ms][DEBUG] START check_scloud [2025-08-25 15:36:42][355170560492136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:36:42][355170560492136][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 29316 5013 24181604 159640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:36:42][355170560492136][304 ms][DEBUG] targetPkg: running [2025-08-25 15:36:42][355170560492136][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 15:36:42][355170560492136][304 ms][DEBUG] START check_boot_completed [2025-08-25 15:36:42][355170560492136][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:36:42][355170560492136][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:36:42][355170560492136][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:36:42][355170560492136][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:36:42][355170560492136][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:36:42][355170560492136][397 ms][DEBUG] START check_internet [2025-08-25 15:36:42][355170560492136][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:36:42][355170560492136][632 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.260/141.260/141.260/0.000 ms\n [2025-08-25 15:36:42][355170560492136][632 ms][DEBUG] check_internet: online [2025-08-25 15:36:42][355170560492136][632 ms][DEBUG] END check_internet in 235 ms [2025-08-25 15:36:42][355170560492136][632 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:36:42][355170560492136][632 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5744\"}'\'' -e'"" [2025-08-25 15:36:42][355170560492136][632 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:36:42][355170560492136][632 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5744\"}'\'' -e'"" [2025-08-25 15:36:46][355170560492136][4209 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 15:36:46][355170560492136][4365 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=107 [2025-08-25 15:36:46][355170560492136][4365 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-25 15:36:46][355170560492136][4365 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 15:36:46][][0 ms][INFO] === Request start === [2025-08-25 15:36:46][][1 ms][DEBUG] START check_scloud [2025-08-25 15:36:46][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:36:47][][269 ms][DEBUG] SU: done in 269 ms; outu0_a118 29316 5013 24346476 171320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:36:47][][270 ms][DEBUG] targetPkg: running [2025-08-25 15:36:47][][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-25 15:36:47][][270 ms][DEBUG] START check_boot_completed [2025-08-25 15:36:47][][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:36:47][][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:36:47][][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:36:47][][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:36:47][][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:36:47][][363 ms][DEBUG] START check_internet [2025-08-25 15:36:47][][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:36:47][][629 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.312/146.312/146.312/0.000 ms\n [2025-08-25 15:36:47][][629 ms][DEBUG] check_internet: online [2025-08-25 15:36:47][][629 ms][DEBUG] END check_internet in 266 ms [2025-08-25 15:36:47][][629 ms][DEBUG] rawBody.length=1129 [2025-08-25 15:36:47][][629 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5281\"}'\'' -e'"" [2025-08-25 15:36:47][][629 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:36:47][][629 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5281\"}'\'' -e'"" [2025-08-25 15:36:50][][4034 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 15:36:50][][4190 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=107 [2025-08-25 15:36:50][][4190 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-25 15:36:50][][4190 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 15:37:03][359339512073643][0 ms][INFO] === Request start === [2025-08-25 15:37:03][359339512073643][1 ms][DEBUG] START check_scloud [2025-08-25 15:37:03][359339512073643][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:37:03][359339512073643][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 29316 5013 24431560 183088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:37:03][359339512073643][310 ms][DEBUG] targetPkg: running [2025-08-25 15:37:03][359339512073643][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 15:37:03][359339512073643][310 ms][DEBUG] START check_boot_completed [2025-08-25 15:37:03][359339512073643][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:37:03][359339512073643][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:37:03][359339512073643][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:37:03][359339512073643][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:37:03][359339512073643][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:37:03][359339512073643][403 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:37:03][359339512073643][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359339512073643\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9292\"}'\'' -e'"" [2025-08-25 15:37:03][359339512073643][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:37:03][359339512073643][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359339512073643\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9292\"}'\'' -e'"" [2025-08-25 15:37:07][359339512073643][4278 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97180e8b-c432-409f-b263-cfd44e502f42","id":"QR_97180e8b-c432-409f-b263-cfd44e502f42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:37:07][359339512073643][4434 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-25 15:37:07][359339512073643][4434 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-25 15:37:07][359339512073643][4434 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:38:05][352177393572516][1 ms][INFO] === Request start === [2025-08-25 15:38:05][352177393572516][1 ms][DEBUG] START check_scloud [2025-08-25 15:38:05][352177393572516][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:38:05][352177393572516][292 ms][DEBUG] SU: done in 290 ms; outu0_a118 29316 5013 24542268 195684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:38:05][352177393572516][292 ms][DEBUG] targetPkg: running [2025-08-25 15:38:05][352177393572516][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-25 15:38:05][352177393572516][292 ms][DEBUG] START check_boot_completed [2025-08-25 15:38:05][352177393572516][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:38:05][352177393572516][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:38:05][352177393572516][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:38:05][352177393572516][401 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:38:05][352177393572516][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:38:05][352177393572516][401 ms][DEBUG] START check_internet [2025-08-25 15:38:05][352177393572516][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:38:05][352177393572516][682 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.587/175.587/175.587/0.000 ms\n [2025-08-25 15:38:05][352177393572516][682 ms][DEBUG] check_internet: online [2025-08-25 15:38:05][352177393572516][682 ms][DEBUG] END check_internet in 281 ms [2025-08-25 15:38:05][352177393572516][683 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:38:05][352177393572516][683 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177393572516\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1232\"}'\'' -e'"" [2025-08-25 15:38:05][352177393572516][683 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:38:05][352177393572516][683 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177393572516\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1232\"}'\'' -e'"" [2025-08-25 15:38:11][352177393572516][6962 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94087daf-4f5c-42ad-bd74-708e7a62f0ea","id":"QR_94087daf-4f5c-42ad-bd74-708e7a62f0ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:38:12][352177393572516][7118 ms][DEBUG] proc_open done in 6435 ms; code=255; res.len=3343 [2025-08-25 15:38:12][352177393572516][7118 ms][DEBUG] END runCmdUntilRes#1 in 6436 ms [2025-08-25 15:38:12][352177393572516][7118 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:40:04][352649113610362][0 ms][INFO] === Request start === [2025-08-25 15:40:04][352649113610362][1 ms][DEBUG] START check_scloud [2025-08-25 15:40:04][352649113610362][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:40:04][352649113610362][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 29316 5013 24725940 207728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:40:04][352649113610362][300 ms][DEBUG] targetPkg: running [2025-08-25 15:40:04][352649113610362][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 15:40:04][352649113610362][300 ms][DEBUG] START check_boot_completed [2025-08-25 15:40:04][352649113610362][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:40:04][352649113610362][345 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 15:40:04][352649113610362][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:40:04][352649113610362][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:40:04][352649113610362][392 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 15:40:04][352649113610362][392 ms][DEBUG] START check_internet [2025-08-25 15:40:04][352649113610362][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:40:04][352649113610362][892 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.288/201.288/201.288/0.000 ms\n [2025-08-25 15:40:04][352649113610362][892 ms][DEBUG] check_internet: online [2025-08-25 15:40:04][352649113610362][892 ms][DEBUG] END check_internet in 500 ms [2025-08-25 15:40:04][352649113610362][892 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:40:04][352649113610362][892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352649113610362\",\"model\":\"SM-G988N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7477\"}'\'' -e'"" [2025-08-25 15:40:04][352649113610362][892 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:40:04][352649113610362][892 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352649113610362\",\"model\":\"SM-G988N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7477\"}'\'' -e'"" [2025-08-25 15:40:09][352649113610362][5312 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fbdcabf6-fb3c-4683-ba34-aad8d92a6c3c","id":"QR_fbdcabf6-fb3c-4683-ba34-aad8d92a6c3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:40:09][352649113610362][5469 ms][DEBUG] proc_open done in 4577 ms; code=255; res.len=3343 [2025-08-25 15:40:09][352649113610362][5469 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-25 15:40:09][352649113610362][5469 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:40:12][350814493561039][1 ms][INFO] === Request start === [2025-08-25 15:40:12][350814493561039][1 ms][DEBUG] START check_scloud [2025-08-25 15:40:12][350814493561039][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:40:12][350814493561039][239 ms][DEBUG] SU: done in 238 ms; outu0_a118 29316 5013 24883900 219928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:40:12][350814493561039][239 ms][DEBUG] targetPkg: running [2025-08-25 15:40:12][350814493561039][239 ms][DEBUG] END check_scloud in 238 ms [2025-08-25 15:40:12][350814493561039][239 ms][DEBUG] START check_boot_completed [2025-08-25 15:40:12][350814493561039][239 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:40:12][350814493561039][270 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:40:12][350814493561039][271 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:40:12][350814493561039][317 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:40:12][350814493561039][317 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 15:40:12][350814493561039][317 ms][DEBUG] START check_internet [2025-08-25 15:40:12][350814493561039][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:40:12][350814493561039][786 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=364 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 364.267/364.267/364.267/0.000 ms\n [2025-08-25 15:40:12][350814493561039][786 ms][DEBUG] check_internet: online [2025-08-25 15:40:12][350814493561039][786 ms][DEBUG] END check_internet in 469 ms [2025-08-25 15:40:12][350814493561039][786 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:40:12][350814493561039][787 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814493561039\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5842\"}'\'' -e'"" [2025-08-25 15:40:12][350814493561039][787 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:40:12][350814493561039][787 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814493561039\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5842\"}'\'' -e'"" [2025-08-25 15:40:16][350814493561039][4582 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa9adb9f-866f-4bd8-95a1-195c798e6fa6","id":"QR_fa9adb9f-866f-4bd8-95a1-195c798e6fa6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:40:16][350814493561039][4738 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-25 15:40:16][350814493561039][4738 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-25 15:40:16][350814493561039][4738 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:40:19][359362970632734][0 ms][INFO] === Request start === [2025-08-25 15:40:19][359362970632734][1 ms][DEBUG] START check_scloud [2025-08-25 15:40:19][359362970632734][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:40:19][359362970632734][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 29316 5013 25048964 228844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:40:19][359362970632734][312 ms][DEBUG] targetPkg: running [2025-08-25 15:40:19][359362970632734][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 15:40:19][359362970632734][312 ms][DEBUG] START check_boot_completed [2025-08-25 15:40:19][359362970632734][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:40:20][359362970632734][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:40:20][359362970632734][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:40:20][359362970632734][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:40:20][359362970632734][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 15:40:20][359362970632734][390 ms][DEBUG] START check_internet [2025-08-25 15:40:20][359362970632734][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:40:20][359362970632734][641 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.279/143.279/143.279/0.000 ms\n [2025-08-25 15:40:20][359362970632734][641 ms][DEBUG] check_internet: online [2025-08-25 15:40:20][359362970632734][641 ms][DEBUG] END check_internet in 250 ms [2025-08-25 15:40:20][359362970632734][641 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:40:20][359362970632734][641 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359362970632734\",\"model\":\"SM-A366U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3038\"}'\'' -e'"" [2025-08-25 15:40:20][359362970632734][641 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:40:20][359362970632734][641 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359362970632734\",\"model\":\"SM-A366U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3038\"}'\'' -e'"" [2025-08-25 15:40:25][359362970632734][5514 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_607a555b-0dd2-4810-ba73-ecfe8fd1531e","id":"QR_607a555b-0dd2-4810-ba73-ecfe8fd1531e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:40:25][359362970632734][5670 ms][DEBUG] proc_open done in 5029 ms; code=255; res.len=3343 [2025-08-25 15:40:25][359362970632734][5670 ms][DEBUG] END runCmdUntilRes#1 in 5029 ms [2025-08-25 15:40:25][359362970632734][5670 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:41:03][358261912069750][0 ms][INFO] === Request start === [2025-08-25 15:41:03][358261912069750][1 ms][DEBUG] START check_scloud [2025-08-25 15:41:03][358261912069750][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:41:03][358261912069750][301 ms][DEBUG] SU: done in 301 ms; outu0_a118 29316 5013 25127972 241008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:41:03][358261912069750][301 ms][DEBUG] targetPkg: running [2025-08-25 15:41:03][358261912069750][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 15:41:03][358261912069750][302 ms][DEBUG] START check_boot_completed [2025-08-25 15:41:03][358261912069750][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:41:03][358261912069750][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:41:03][358261912069750][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:41:03][358261912069750][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:41:03][358261912069750][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:41:03][358261912069750][411 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:41:03][358261912069750][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261912069750\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6173\"}'\'' -e'"" [2025-08-25 15:41:03][358261912069750][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:41:03][358261912069750][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261912069750\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6173\"}'\'' -e'"" [2025-08-25 15:41:07][358261912069750][4160 ms][DEBUG] proc_open done in 3748 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 15:41:07][358261912069750][4160 ms][DEBUG] END runCmdUntilRes#1 in 3748 ms [2025-08-25 15:41:07][358261912069750][4160 ms][WARN] Detected error: Process with pid 29316 either refused to load frida-agent, or terminated during injection [2025-08-25 15:41:07][358261912069750][4160 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 15:41:07][358261912069750][4300 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 15:41:07][358261912069750][4301 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 15:41:07][358261912069750][4301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 15:41:07][358261912069750][4425 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 15:41:07][358261912069750][4425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 15:41:07][358261912069750][4613 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 15:41:09][358261912069750][6628 ms][DEBUG] START check_boot_completed [2025-08-25 15:41:09][358261912069750][6628 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:41:09][358261912069750][6675 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:41:09][358261912069750][6675 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:41:09][358261912069750][6722 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:41:09][358261912069750][6722 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:41:13][358261912069750][9736 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 15:41:13][358261912069750][9737 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261912069750\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6173\"}'\'' -e'"" [2025-08-25 15:41:16][358261912069750][13657 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16bd99bd-6fe1-45a1-9155-72cd2bb0a4b6","id":"QR_16bd99bd-6fe1-45a1-9155-72cd2bb0a4b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:41:17][358261912069750][13814 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-25 15:41:17][358261912069750][13814 ms][DEBUG] END runCmdUntilRes#2 in 4077 ms [2025-08-25 15:41:17][358261912069750][13814 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:41:19][351681598721068][0 ms][INFO] === Request start === [2025-08-25 15:41:19][351681598721068][1 ms][DEBUG] START check_scloud [2025-08-25 15:41:19][351681598721068][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:41:19][351681598721068][250 ms][DEBUG] SU: done in 250 ms; outu0_a118 31018 5013 23835136 124444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:41:19][351681598721068][251 ms][DEBUG] targetPkg: running [2025-08-25 15:41:19][351681598721068][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-25 15:41:19][351681598721068][251 ms][DEBUG] START check_boot_completed [2025-08-25 15:41:19][351681598721068][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:41:19][351681598721068][281 ms][DEBUG] ADB: done in 30 ms; out [2025-08-25 15:41:19][351681598721068][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:41:19][351681598721068][328 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:41:19][351681598721068][328 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-25 15:41:19][351681598721068][328 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:41:19][351681598721068][328 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681598721068\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8871\"}'\'' -e'"" [2025-08-25 15:41:19][351681598721068][328 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:41:19][351681598721068][328 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681598721068\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8871\"}'\'' -e'"" [2025-08-25 15:41:24][351681598721068][4546 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4b2a80a-013b-494c-b49f-ed60f378896d","id":"QR_b4b2a80a-013b-494c-b49f-ed60f378896d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:41:24][351681598721068][4702 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-08-25 15:41:24][351681598721068][4702 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-25 15:41:24][351681598721068][4703 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:42:04][358533137132401][0 ms][INFO] === Request start === [2025-08-25 15:42:04][358533137132401][1 ms][DEBUG] START check_scloud [2025-08-25 15:42:04][358533137132401][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:42:05][358533137132401][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 31018 5013 23897336 137832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:42:05][358533137132401][308 ms][DEBUG] targetPkg: running [2025-08-25 15:42:05][358533137132401][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 15:42:05][358533137132401][308 ms][DEBUG] START check_boot_completed [2025-08-25 15:42:05][358533137132401][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:42:05][358533137132401][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:42:05][358533137132401][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:42:05][358533137132401][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:42:05][358533137132401][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 15:42:05][358533137132401][386 ms][DEBUG] START check_internet [2025-08-25 15:42:05][358533137132401][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:42:05][358533137132401][731 ms][DEBUG] SU: done in 345 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.882/249.882/249.882/0.000 ms\n [2025-08-25 15:42:05][358533137132401][731 ms][DEBUG] check_internet: online [2025-08-25 15:42:05][358533137132401][731 ms][DEBUG] END check_internet in 345 ms [2025-08-25 15:42:05][358533137132401][731 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:42:05][358533137132401][731 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358533137132401\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5597\"}'\'' -e'"" [2025-08-25 15:42:05][358533137132401][731 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:42:05][358533137132401][731 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358533137132401\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5597\"}'\'' -e'"" [2025-08-25 15:42:10][358533137132401][5900 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c853462b-c312-4674-9556-c8ecbb72443f","id":"QR_c853462b-c312-4674-9556-c8ecbb72443f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:42:10][358533137132401][6057 ms][DEBUG] proc_open done in 5326 ms; code=255; res.len=3343 [2025-08-25 15:42:10][358533137132401][6057 ms][DEBUG] END runCmdUntilRes#1 in 5326 ms [2025-08-25 15:42:10][358533137132401][6057 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:42:17][353353824104000][1 ms][INFO] === Request start === [2025-08-25 15:42:17][353353824104000][1 ms][DEBUG] START check_scloud [2025-08-25 15:42:17][353353824104000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:42:17][353353824104000][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 31018 5013 24037824 148892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:42:17][353353824104000][302 ms][DEBUG] targetPkg: running [2025-08-25 15:42:17][353353824104000][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 15:42:17][353353824104000][302 ms][DEBUG] START check_boot_completed [2025-08-25 15:42:17][353353824104000][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:42:17][353353824104000][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:42:17][353353824104000][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:42:17][353353824104000][427 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 15:42:17][353353824104000][427 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 15:42:17][353353824104000][427 ms][DEBUG] START check_internet [2025-08-25 15:42:17][353353824104000][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:42:17][353353824104000][770 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.214/239.214/239.214/0.000 ms\n [2025-08-25 15:42:17][353353824104000][770 ms][DEBUG] check_internet: online [2025-08-25 15:42:17][353353824104000][770 ms][DEBUG] END check_internet in 344 ms [2025-08-25 15:42:17][353353824104000][770 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:42:17][353353824104000][770 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353824104000\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"UPO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9766\"}'\'' -e'"" [2025-08-25 15:42:17][353353824104000][770 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:42:17][353353824104000][770 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353824104000\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"UPO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9766\"}'\'' -e'"" [2025-08-25 15:42:23][353353824104000][6332 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ede91c9-6f9c-4bf8-934c-dafb57c3ff50","id":"QR_9ede91c9-6f9c-4bf8-934c-dafb57c3ff50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:42:23][353353824104000][6488 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-08-25 15:42:23][353353824104000][6488 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-25 15:42:23][353353824104000][6488 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:43:03][350013900699165][0 ms][INFO] === Request start === [2025-08-25 15:43:03][350013900699165][1 ms][DEBUG] START check_scloud [2025-08-25 15:43:03][350013900699165][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:43:03][350013900699165][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 31018 5013 24126976 160060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:43:03][350013900699165][313 ms][DEBUG] targetPkg: running [2025-08-25 15:43:03][350013900699165][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 15:43:03][350013900699165][313 ms][DEBUG] START check_boot_completed [2025-08-25 15:43:03][350013900699165][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:43:04][350013900699165][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:43:04][350013900699165][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:43:04][350013900699165][407 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 15:43:04][350013900699165][408 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 15:43:04][350013900699165][408 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:43:04][350013900699165][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013900699165\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9254\"}'\'' -e'"" [2025-08-25 15:43:04][350013900699165][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:43:04][350013900699165][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013900699165\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9254\"}'\'' -e'"" [2025-08-25 15:43:08][350013900699165][4765 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9eb7166e-5402-4e3b-bc48-3ee5ccf0f436","id":"QR_9eb7166e-5402-4e3b-bc48-3ee5ccf0f436","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:43:08][350013900699165][4921 ms][DEBUG] proc_open done in 4513 ms; code=255; res.len=3343 [2025-08-25 15:43:08][350013900699165][4921 ms][DEBUG] END runCmdUntilRes#1 in 4513 ms [2025-08-25 15:43:08][350013900699165][4921 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:43:10][358080741515712][0 ms][INFO] === Request start === [2025-08-25 15:43:10][358080741515712][0 ms][DEBUG] START check_scloud [2025-08-25 15:43:10][358080741515712][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:43:10][358080741515712][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 31018 5013 24274556 171360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:43:10][358080741515712][321 ms][DEBUG] targetPkg: running [2025-08-25 15:43:10][358080741515712][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-25 15:43:10][358080741515712][321 ms][DEBUG] START check_boot_completed [2025-08-25 15:43:10][358080741515712][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:43:10][358080741515712][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:43:10][358080741515712][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:43:10][358080741515712][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:43:10][358080741515712][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:43:10][358080741515712][415 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:43:10][358080741515712][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080741515712\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5535\"}'\'' -e'"" [2025-08-25 15:43:10][358080741515712][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:43:10][358080741515712][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080741515712\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5535\"}'\'' -e'"" [2025-08-25 15:43:14][358080741515712][4070 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61d25d68-1602-42b4-9ff5-3f910a8d6176","id":"QR_61d25d68-1602-42b4-9ff5-3f910a8d6176","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:43:14][358080741515712][4226 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-25 15:43:14][358080741515712][4226 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-25 15:43:14][358080741515712][4226 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:44:03][350940411019857][0 ms][INFO] === Request start === [2025-08-25 15:44:03][350940411019857][1 ms][DEBUG] START check_scloud [2025-08-25 15:44:03][350940411019857][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:44:04][350940411019857][323 ms][DEBUG] SU: done in 323 ms; outu0_a118 31018 5013 24382140 183260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:44:04][350940411019857][324 ms][DEBUG] targetPkg: running [2025-08-25 15:44:04][350940411019857][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-25 15:44:04][350940411019857][324 ms][DEBUG] START check_boot_completed [2025-08-25 15:44:04][350940411019857][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:44:04][350940411019857][370 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:44:04][350940411019857][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:44:04][350940411019857][418 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:44:04][350940411019857][418 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:44:04][350940411019857][418 ms][DEBUG] START check_internet [2025-08-25 15:44:04][350940411019857][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:44:04][350940411019857][761 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.613/232.613/232.613/0.000 ms\n [2025-08-25 15:44:04][350940411019857][761 ms][DEBUG] check_internet: online [2025-08-25 15:44:04][350940411019857][761 ms][DEBUG] END check_internet in 343 ms [2025-08-25 15:44:04][350940411019857][761 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:44:04][350940411019857][761 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940411019857\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2026\"}'\'' -e'"" [2025-08-25 15:44:04][350940411019857][761 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:44:04][350940411019857][761 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940411019857\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2026\"}'\'' -e'"" [2025-08-25 15:44:09][350940411019857][5510 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5a97f28-c00a-46ce-bf72-43f3ea9b27e6","id":"QR_a5a97f28-c00a-46ce-bf72-43f3ea9b27e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:44:09][350940411019857][5666 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-08-25 15:44:09][350940411019857][5666 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-08-25 15:44:09][350940411019857][5666 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:44:13][350530880014685][0 ms][INFO] === Request start === [2025-08-25 15:44:13][350530880014685][1 ms][DEBUG] START check_scloud [2025-08-25 15:44:13][350530880014685][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:44:13][350530880014685][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 31018 5013 24514500 194236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:44:13][350530880014685][300 ms][DEBUG] targetPkg: running [2025-08-25 15:44:13][350530880014685][300 ms][DEBUG] END check_scloud in 300 ms [2025-08-25 15:44:13][350530880014685][300 ms][DEBUG] START check_boot_completed [2025-08-25 15:44:13][350530880014685][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:44:13][350530880014685][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:44:13][350530880014685][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:44:13][350530880014685][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:44:13][350530880014685][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:44:13][350530880014685][410 ms][DEBUG] START check_internet [2025-08-25 15:44:13][350530880014685][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:44:14][350530880014685][816 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.190/255.190/255.190/0.000 ms\n [2025-08-25 15:44:14][350530880014685][816 ms][DEBUG] check_internet: online [2025-08-25 15:44:14][350530880014685][816 ms][DEBUG] END check_internet in 406 ms [2025-08-25 15:44:14][350530880014685][816 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:44:14][350530880014685][816 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350530880014685\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9083\"}'\'' -e'"" [2025-08-25 15:44:14][350530880014685][816 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:44:14][350530880014685][816 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350530880014685\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9083\"}'\'' -e'"" [2025-08-25 15:44:18][350530880014685][4908 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_991eb6a4-7a20-472a-b11e-a84c5015c03a","id":"QR_991eb6a4-7a20-472a-b11e-a84c5015c03a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:44:18][350530880014685][5064 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-25 15:44:18][350530880014685][5064 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-25 15:44:18][350530880014685][5064 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:45:05][353150180230191][1 ms][INFO] === Request start === [2025-08-25 15:45:05][353150180230191][1 ms][DEBUG] START check_scloud [2025-08-25 15:45:05][353150180230191][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:45:05][353150180230191][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 31018 5013 24611972 206376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:45:05][353150180230191][308 ms][DEBUG] targetPkg: running [2025-08-25 15:45:05][353150180230191][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 15:45:05][353150180230191][308 ms][DEBUG] START check_boot_completed [2025-08-25 15:45:05][353150180230191][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:45:05][353150180230191][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:45:05][353150180230191][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:45:05][353150180230191][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:45:05][353150180230191][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:45:05][353150180230191][417 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:45:05][353150180230191][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150180230191\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5331\"}'\'' -e'"" [2025-08-25 15:45:05][353150180230191][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:45:05][353150180230191][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150180230191\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5331\"}'\'' -e'"" [2025-08-25 15:45:11][353150180230191][6775 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_528665ef-1059-4fef-989c-125b0f1b329a","id":"QR_528665ef-1059-4fef-989c-125b0f1b329a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:45:12][353150180230191][6931 ms][DEBUG] proc_open done in 6513 ms; code=255; res.len=3343 [2025-08-25 15:45:12][353150180230191][6931 ms][DEBUG] END runCmdUntilRes#1 in 6513 ms [2025-08-25 15:45:12][353150180230191][6931 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:46:04][357644128730102][0 ms][INFO] === Request start === [2025-08-25 15:46:04][357644128730102][1 ms][DEBUG] START check_scloud [2025-08-25 15:46:04][357644128730102][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:46:04][357644128730102][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 31018 5013 24746216 217144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:46:04][357644128730102][310 ms][DEBUG] targetPkg: running [2025-08-25 15:46:04][357644128730102][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 15:46:04][357644128730102][310 ms][DEBUG] START check_boot_completed [2025-08-25 15:46:04][357644128730102][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:46:04][357644128730102][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:46:04][357644128730102][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:46:04][357644128730102][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:46:04][357644128730102][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:46:04][357644128730102][404 ms][DEBUG] START check_internet [2025-08-25 15:46:04][357644128730102][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:46:05][357644128730102][841 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=152 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 152.550/152.550/152.550/0.000 ms\n [2025-08-25 15:46:05][357644128730102][841 ms][DEBUG] check_internet: online [2025-08-25 15:46:05][357644128730102][841 ms][DEBUG] END check_internet in 437 ms [2025-08-25 15:46:05][357644128730102][841 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:46:05][357644128730102][841 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357644128730102\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7954\"}'\'' -e'"" [2025-08-25 15:46:05][357644128730102][841 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:46:05][357644128730102][841 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357644128730102\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7954\"}'\'' -e'"" [2025-08-25 15:46:13][357644128730102][8854 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4daf429e-7e4e-4f8e-afa3-3e2a47285454","id":"QR_4daf429e-7e4e-4f8e-afa3-3e2a47285454","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:46:13][357644128730102][9011 ms][DEBUG] proc_open done in 8169 ms; code=255; res.len=3343 [2025-08-25 15:46:13][357644128730102][9011 ms][DEBUG] END runCmdUntilRes#1 in 8170 ms [2025-08-25 15:46:13][357644128730102][9011 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:46:19][356544395300954][0 ms][INFO] === Request start === [2025-08-25 15:46:19][356544395300954][1 ms][DEBUG] START check_scloud [2025-08-25 15:46:19][356544395300954][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:46:19][356544395300954][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 31018 5013 24892784 229160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:46:19][356544395300954][299 ms][DEBUG] targetPkg: running [2025-08-25 15:46:19][356544395300954][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 15:46:19][356544395300954][299 ms][DEBUG] START check_boot_completed [2025-08-25 15:46:19][356544395300954][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:46:19][356544395300954][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:46:19][356544395300954][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:46:19][356544395300954][408 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 15:46:19][356544395300954][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:46:19][356544395300954][408 ms][DEBUG] START check_internet [2025-08-25 15:46:19][356544395300954][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:46:20][356544395300954][814 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.500/245.500/245.500/0.000 ms\n [2025-08-25 15:46:20][356544395300954][814 ms][DEBUG] check_internet: online [2025-08-25 15:46:20][356544395300954][814 ms][DEBUG] END check_internet in 406 ms [2025-08-25 15:46:20][356544395300954][814 ms][DEBUG] rawBody.length=1149 [2025-08-25 15:46:20][356544395300954][814 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544395300954\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9027\"}'\'' -e'"" [2025-08-25 15:46:20][356544395300954][815 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:46:20][356544395300954][815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544395300954\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9027\"}'\'' -e'"" [2025-08-25 15:46:25][356544395300954][5656 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa0fb89c-b25b-4c7c-a269-2465a8167b76","id":"QR_aa0fb89c-b25b-4c7c-a269-2465a8167b76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:46:25][356544395300954][5813 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-25 15:46:25][356544395300954][5813 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-08-25 15:46:25][356544395300954][5813 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:46:29][351671773415008][0 ms][INFO] === Request start === [2025-08-25 15:46:29][351671773415008][1 ms][DEBUG] START check_scloud [2025-08-25 15:46:29][351671773415008][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:46:29][351671773415008][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 31018 5013 25053588 240136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:46:29][351671773415008][305 ms][DEBUG] targetPkg: running [2025-08-25 15:46:29][351671773415008][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 15:46:29][351671773415008][306 ms][DEBUG] START check_boot_completed [2025-08-25 15:46:29][351671773415008][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:46:29][351671773415008][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:46:29][351671773415008][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:46:29][351671773415008][446 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 15:46:29][351671773415008][446 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 15:46:29][351671773415008][446 ms][DEBUG] START check_internet [2025-08-25 15:46:29][351671773415008][446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:46:29][351671773415008][836 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.587/248.587/248.587/0.000 ms\n [2025-08-25 15:46:29][351671773415008][837 ms][DEBUG] check_internet: online [2025-08-25 15:46:29][351671773415008][837 ms][DEBUG] END check_internet in 391 ms [2025-08-25 15:46:29][351671773415008][837 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:46:29][351671773415008][837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671773415008\",\"model\":\"SM-A136S\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1724\"}'\'' -e'"" [2025-08-25 15:46:29][351671773415008][837 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:46:29][351671773415008][837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671773415008\",\"model\":\"SM-A136S\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1724\"}'\'' -e'"" [2025-08-25 15:46:33][351671773415008][4507 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 15:46:33][351671773415008][4507 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-25 15:46:33][351671773415008][4507 ms][WARN] Detected error: Process with pid 31018 either refused to load frida-agent, or terminated during injection [2025-08-25 15:46:33][351671773415008][4507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 15:46:33][351671773415008][4664 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 15:46:33][351671773415008][4664 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 15:46:33][351671773415008][4664 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 15:46:33][351671773415008][4804 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 15:46:33][351671773415008][4804 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 15:46:34][351671773415008][4976 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 15:46:36][351671773415008][6991 ms][DEBUG] START check_boot_completed [2025-08-25 15:46:36][351671773415008][6991 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:46:36][351671773415008][7038 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:46:36][351671773415008][7038 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:46:36][351671773415008][7085 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:46:36][351671773415008][7085 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 15:46:39][351671773415008][10100 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 15:46:39][351671773415008][10100 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671773415008\",\"model\":\"SM-A136S\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1724\"}'\'' -e'"" [2025-08-25 15:46:43][351671773415008][14099 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_00bdb5eb-5b40-4e9f-84fe-098eb64c3ad0","id":"QR_00bdb5eb-5b40-4e9f-84fe-098eb64c3ad0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:46:43][351671773415008][14255 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-25 15:46:43][351671773415008][14255 ms][DEBUG] END runCmdUntilRes#2 in 4156 ms [2025-08-25 15:46:43][351671773415008][14255 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:49:03][351676568297826][1 ms][INFO] === Request start === [2025-08-25 15:49:03][351676568297826][1 ms][DEBUG] START check_scloud [2025-08-25 15:49:03][351676568297826][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:49:03][351676568297826][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 32271 5013 23722916 126776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:49:03][351676568297826][312 ms][DEBUG] targetPkg: running [2025-08-25 15:49:03][351676568297826][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 15:49:03][351676568297826][313 ms][DEBUG] START check_boot_completed [2025-08-25 15:49:03][351676568297826][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:49:04][351676568297826][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:49:04][351676568297826][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:49:04][351676568297826][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:49:04][351676568297826][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:49:04][351676568297826][406 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:49:04][351676568297826][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676568297826\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8135\"}'\'' -e'"" [2025-08-25 15:49:04][351676568297826][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:49:04][351676568297826][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676568297826\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8135\"}'\'' -e'"" [2025-08-25 15:49:08][351676568297826][4514 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b916eee-50a1-4321-a549-e90a31f01629","id":"QR_2b916eee-50a1-4321-a549-e90a31f01629","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:49:08][351676568297826][4670 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 15:49:08][351676568297826][4670 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 15:49:08][351676568297826][4670 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:49:10][354254222166683][0 ms][INFO] === Request start === [2025-08-25 15:49:10][354254222166683][1 ms][DEBUG] START check_scloud [2025-08-25 15:49:10][354254222166683][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:49:11][354254222166683][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 32271 5013 23851948 137244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:49:11][354254222166683][326 ms][DEBUG] targetPkg: running [2025-08-25 15:49:11][354254222166683][326 ms][DEBUG] END check_scloud in 326 ms [2025-08-25 15:49:11][354254222166683][326 ms][DEBUG] START check_boot_completed [2025-08-25 15:49:11][354254222166683][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:49:11][354254222166683][372 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:49:11][354254222166683][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:49:11][354254222166683][419 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:49:11][354254222166683][420 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:49:11][354254222166683][420 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:49:11][354254222166683][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354254222166683\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4895\"}'\'' -e'"" [2025-08-25 15:49:11][354254222166683][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:49:11][354254222166683][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354254222166683\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4895\"}'\'' -e'"" [2025-08-25 15:49:15][354254222166683][4168 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02383675-4fe2-475f-9c7b-4ddf414fa456","id":"QR_02383675-4fe2-475f-9c7b-4ddf414fa456","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:49:15][354254222166683][4325 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-25 15:49:15][354254222166683][4325 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 15:49:15][354254222166683][4325 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:54:03][358184576576763][1 ms][INFO] === Request start === [2025-08-25 15:54:03][358184576576763][1 ms][DEBUG] START check_scloud [2025-08-25 15:54:03][358184576576763][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:54:04][358184576576763][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 32271 5013 23994348 149388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:54:04][358184576576763][295 ms][DEBUG] targetPkg: running [2025-08-25 15:54:04][358184576576763][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-25 15:54:04][358184576576763][295 ms][DEBUG] START check_boot_completed [2025-08-25 15:54:04][358184576576763][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:54:04][358184576576763][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:54:04][358184576576763][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:54:04][358184576576763][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:54:04][358184576576763][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 15:54:04][358184576576763][374 ms][DEBUG] START check_internet [2025-08-25 15:54:04][358184576576763][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:54:04][358184576576763][858 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.358/200.358/200.358/0.000 ms\n [2025-08-25 15:54:04][358184576576763][858 ms][DEBUG] check_internet: online [2025-08-25 15:54:04][358184576576763][858 ms][DEBUG] END check_internet in 484 ms [2025-08-25 15:54:04][358184576576763][858 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:54:04][358184576576763][858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184576576763\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3746\"}'\'' -e'"" [2025-08-25 15:54:04][358184576576763][858 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:54:04][358184576576763][858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184576576763\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3746\"}'\'' -e'"" [2025-08-25 15:54:08][358184576576763][5075 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a28eaf0-50ba-4a1c-96c5-4931731eccc4","id":"QR_3a28eaf0-50ba-4a1c-96c5-4931731eccc4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:54:08][358184576576763][5232 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-25 15:54:08][358184576576763][5232 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-25 15:54:08][358184576576763][5232 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:55:03][351240640055288][0 ms][INFO] === Request start === [2025-08-25 15:55:03][351240640055288][1 ms][DEBUG] START check_scloud [2025-08-25 15:55:03][351240640055288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:55:04][351240640055288][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 32271 5013 24130640 160432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:55:04][351240640055288][278 ms][DEBUG] targetPkg: running [2025-08-25 15:55:04][351240640055288][278 ms][DEBUG] END check_scloud in 278 ms [2025-08-25 15:55:04][351240640055288][278 ms][DEBUG] START check_boot_completed [2025-08-25 15:55:04][351240640055288][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:55:04][351240640055288][309 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:55:04][351240640055288][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:55:04][351240640055288][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:55:04][351240640055288][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 15:55:04][351240640055288][356 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:55:04][351240640055288][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640055288\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7015\"}'\'' -e'"" [2025-08-25 15:55:04][351240640055288][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:55:04][351240640055288][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640055288\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7015\"}'\'' -e'"" [2025-08-25 15:55:08][351240640055288][4246 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6e5d950-4051-4b12-be04-90d818047981","id":"QR_f6e5d950-4051-4b12-be04-90d818047981","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:55:08][351240640055288][4402 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-25 15:55:08][351240640055288][4402 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-25 15:55:08][351240640055288][4402 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:55:10][357674435901187][0 ms][INFO] === Request start === [2025-08-25 15:55:10][357674435901187][1 ms][DEBUG] START check_scloud [2025-08-25 15:55:10][357674435901187][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:55:11][357674435901187][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 32271 5013 24306008 171152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:55:11][357674435901187][295 ms][DEBUG] targetPkg: running [2025-08-25 15:55:11][357674435901187][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-25 15:55:11][357674435901187][295 ms][DEBUG] START check_boot_completed [2025-08-25 15:55:11][357674435901187][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:55:11][357674435901187][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:55:11][357674435901187][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:55:11][357674435901187][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:55:11][357674435901187][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 15:55:11][357674435901187][388 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:55:11][357674435901187][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674435901187\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6147\"}'\'' -e'"" [2025-08-25 15:55:11][357674435901187][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:55:11][357674435901187][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674435901187\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6147\"}'\'' -e'"" [2025-08-25 15:55:15][357674435901187][4590 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_deeefe21-08b7-46a1-9656-63b17a68cf9c","id":"QR_deeefe21-08b7-46a1-9656-63b17a68cf9c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:55:15][357674435901187][4746 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-25 15:55:15][357674435901187][4746 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-25 15:55:15][357674435901187][4746 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:55:18][351726340331037][0 ms][INFO] === Request start === [2025-08-25 15:55:18][351726340331037][1 ms][DEBUG] START check_scloud [2025-08-25 15:55:18][351726340331037][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:55:18][351726340331037][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 32271 5013 24454752 183028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:55:18][351726340331037][277 ms][DEBUG] targetPkg: running [2025-08-25 15:55:18][351726340331037][277 ms][DEBUG] END check_scloud in 277 ms [2025-08-25 15:55:18][351726340331037][277 ms][DEBUG] START check_boot_completed [2025-08-25 15:55:18][351726340331037][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:55:18][351726340331037][309 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 15:55:18][351726340331037][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:55:18][351726340331037][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 15:55:18][351726340331037][355 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 15:55:18][351726340331037][355 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:55:18][351726340331037][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351726340331037\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5358\"}'\'' -e'"" [2025-08-25 15:55:18][351726340331037][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:55:18][351726340331037][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351726340331037\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5358\"}'\'' -e'"" [2025-08-25 15:55:22][351726340331037][4105 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e36d44b-c78c-46b1-b2bd-e79ddbdc402e","id":"QR_4e36d44b-c78c-46b1-b2bd-e79ddbdc402e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:55:22][351726340331037][4261 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-25 15:55:22][351726340331037][4261 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 15:55:22][351726340331037][4261 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:57:03][353881489564316][1 ms][INFO] === Request start === [2025-08-25 15:57:03][353881489564316][1 ms][DEBUG] START check_scloud [2025-08-25 15:57:03][353881489564316][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:57:03][353881489564316][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 32271 5013 24535804 194612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:57:03][353881489564316][309 ms][DEBUG] targetPkg: running [2025-08-25 15:57:03][353881489564316][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 15:57:03][353881489564316][309 ms][DEBUG] START check_boot_completed [2025-08-25 15:57:03][353881489564316][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:57:03][353881489564316][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 15:57:03][353881489564316][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:57:03][353881489564316][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:57:03][353881489564316][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:57:03][353881489564316][418 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:57:03][353881489564316][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489564316\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3443\"}'\'' -e'"" [2025-08-25 15:57:03][353881489564316][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:57:03][353881489564316][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489564316\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3443\"}'\'' -e'"" [2025-08-25 15:57:07][353881489564316][4495 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c09311b7-e1ac-49e7-b318-a5d286cde6a5","id":"QR_c09311b7-e1ac-49e7-b318-a5d286cde6a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:57:07][353881489564316][4651 ms][DEBUG] proc_open done in 4232 ms; code=255; res.len=3343 [2025-08-25 15:57:07][353881489564316][4651 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 15:57:07][353881489564316][4651 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 15:58:03][352549936276591][0 ms][INFO] === Request start === [2025-08-25 15:58:03][352549936276591][1 ms][DEBUG] START check_scloud [2025-08-25 15:58:03][352549936276591][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 15:58:03][352549936276591][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 32271 5013 24651104 206480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 15:58:03][352549936276591][312 ms][DEBUG] targetPkg: running [2025-08-25 15:58:03][352549936276591][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 15:58:03][352549936276591][312 ms][DEBUG] START check_boot_completed [2025-08-25 15:58:03][352549936276591][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 15:58:03][352549936276591][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 15:58:03][352549936276591][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 15:58:04][352549936276591][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 15:58:04][352549936276591][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 15:58:04][352549936276591][421 ms][DEBUG] START check_internet [2025-08-25 15:58:04][352549936276591][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 15:58:04][352549936276591][859 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.665/201.665/201.665/0.000 ms\n [2025-08-25 15:58:04][352549936276591][859 ms][DEBUG] check_internet: online [2025-08-25 15:58:04][352549936276591][859 ms][DEBUG] END check_internet in 438 ms [2025-08-25 15:58:04][352549936276591][859 ms][DEBUG] rawBody.length=1148 [2025-08-25 15:58:04][352549936276591][859 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936276591\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7057\"}'\'' -e'"" [2025-08-25 15:58:04][352549936276591][859 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 15:58:04][352549936276591][859 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549936276591\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7057\"}'\'' -e'"" [2025-08-25 15:58:08][352549936276591][5045 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_735e1c6f-faf8-4e95-9179-592ba5de7ce9","id":"QR_735e1c6f-faf8-4e95-9179-592ba5de7ce9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 15:58:08][352549936276591][5201 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-25 15:58:08][352549936276591][5201 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-25 15:58:08][352549936276591][5201 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:01:03][351270416297111][1 ms][INFO] === Request start === [2025-08-25 16:01:03][351270416297111][1 ms][DEBUG] START check_scloud [2025-08-25 16:01:03][351270416297111][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:01:03][351270416297111][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 32271 5013 24781188 217316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:01:03][351270416297111][302 ms][DEBUG] targetPkg: running [2025-08-25 16:01:03][351270416297111][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 16:01:03][351270416297111][302 ms][DEBUG] START check_boot_completed [2025-08-25 16:01:03][351270416297111][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:01:03][351270416297111][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:01:03][351270416297111][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:01:03][351270416297111][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:01:03][351270416297111][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 16:01:03][351270416297111][380 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:01:03][351270416297111][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270416297111\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7328\"}'\'' -e'"" [2025-08-25 16:01:03][351270416297111][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:01:03][351270416297111][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270416297111\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7328\"}'\'' -e'"" [2025-08-25 16:01:08][351270416297111][4676 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f79fea7c-4c05-4618-b629-b74ba5c309df","id":"QR_f79fea7c-4c05-4618-b629-b74ba5c309df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:01:08][351270416297111][4832 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-08-25 16:01:08][351270416297111][4832 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-25 16:01:08][351270416297111][4832 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:03:04][350183731283339][0 ms][INFO] === Request start === [2025-08-25 16:03:04][350183731283339][0 ms][DEBUG] START check_scloud [2025-08-25 16:03:04][350183731283339][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:03:05][350183731283339][290 ms][DEBUG] SU: done in 290 ms; outu0_a118 32271 5013 24899176 229340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:03:05][350183731283339][290 ms][DEBUG] targetPkg: running [2025-08-25 16:03:05][350183731283339][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-25 16:03:05][350183731283339][291 ms][DEBUG] START check_boot_completed [2025-08-25 16:03:05][350183731283339][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:03:05][350183731283339][336 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 16:03:05][350183731283339][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:03:05][350183731283339][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:03:05][350183731283339][383 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 16:03:05][350183731283339][383 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:03:05][350183731283339][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350183731283339\",\"model\":\"SM-A526U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMK\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8066\"}'\'' -e'"" [2025-08-25 16:03:05][350183731283339][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:03:05][350183731283339][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350183731283339\",\"model\":\"SM-A526U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMK\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8066\"}'\'' -e'"" [2025-08-25 16:03:11][350183731283339][6788 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d30211e9-bce1-478c-96ca-fe637f24a64e","id":"QR_d30211e9-bce1-478c-96ca-fe637f24a64e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:03:11][350183731283339][6944 ms][DEBUG] proc_open done in 6560 ms; code=255; res.len=3343 [2025-08-25 16:03:11][350183731283339][6944 ms][DEBUG] END runCmdUntilRes#1 in 6561 ms [2025-08-25 16:03:11][350183731283339][6944 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:04:04][354691313566034][0 ms][INFO] === Request start === [2025-08-25 16:04:04][354691313566034][1 ms][DEBUG] START check_scloud [2025-08-25 16:04:04][354691313566034][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:04:04][354691313566034][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 32271 5013 25049804 240420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:04:04][354691313566034][311 ms][DEBUG] targetPkg: running [2025-08-25 16:04:04][354691313566034][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 16:04:04][354691313566034][311 ms][DEBUG] START check_boot_completed [2025-08-25 16:04:04][354691313566034][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:04:04][354691313566034][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:04:04][354691313566034][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:04:04][354691313566034][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:04:04][354691313566034][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 16:04:04][354691313566034][405 ms][DEBUG] START check_internet [2025-08-25 16:04:04][354691313566034][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:04:05][354691313566034][1030 ms][DEBUG] SU: done in 624 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.288/202.288/202.288/0.000 ms\n [2025-08-25 16:04:05][354691313566034][1030 ms][DEBUG] check_internet: online [2025-08-25 16:04:05][354691313566034][1030 ms][DEBUG] END check_internet in 625 ms [2025-08-25 16:04:05][354691313566034][1030 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:04:05][354691313566034][1030 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354691313566034\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7634\"}'\'' -e'"" [2025-08-25 16:04:05][354691313566034][1030 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:04:05][354691313566034][1030 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354691313566034\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7634\"}'\'' -e'"" [2025-08-25 16:04:09][354691313566034][4748 ms][DEBUG] proc_open done in 3718 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 16:04:09][354691313566034][4748 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-08-25 16:04:09][354691313566034][4748 ms][WARN] Detected error: Process with pid 32271 either refused to load frida-agent, or terminated during injection [2025-08-25 16:04:09][354691313566034][4748 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 16:04:09][354691313566034][4904 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 16:04:09][354691313566034][4904 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 16:04:09][354691313566034][4904 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:04:09][354691313566034][5029 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 16:04:09][354691313566034][5029 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:04:09][354691313566034][5201 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 16:04:11][354691313566034][7216 ms][DEBUG] START check_boot_completed [2025-08-25 16:04:11][354691313566034][7216 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:04:11][354691313566034][7263 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:04:11][354691313566034][7263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:04:11][354691313566034][7309 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:04:11][354691313566034][7309 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 16:04:14][354691313566034][10324 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 16:04:14][354691313566034][10324 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354691313566034\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7634\"}'\'' -e'"" [2025-08-25 16:04:19][354691313566034][15073 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9425d3ff-52c3-433f-bd8f-f325b952e46d","id":"QR_9425d3ff-52c3-433f-bd8f-f325b952e46d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:04:19][354691313566034][15229 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-08-25 16:04:19][354691313566034][15229 ms][DEBUG] END runCmdUntilRes#2 in 4905 ms [2025-08-25 16:04:19][354691313566034][15229 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:04:24][354882177771279][0 ms][INFO] === Request start === [2025-08-25 16:04:24][354882177771279][1 ms][DEBUG] START check_scloud [2025-08-25 16:04:24][354882177771279][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:04:24][354882177771279][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 1229 5013 23761920 124884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:04:24][354882177771279][250 ms][DEBUG] targetPkg: running [2025-08-25 16:04:24][354882177771279][250 ms][DEBUG] END check_scloud in 250 ms [2025-08-25 16:04:24][354882177771279][250 ms][DEBUG] START check_boot_completed [2025-08-25 16:04:24][354882177771279][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:04:24][354882177771279][297 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:04:24][354882177771279][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:04:24][354882177771279][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:04:24][354882177771279][344 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:04:24][354882177771279][344 ms][DEBUG] START check_internet [2025-08-25 16:04:24][354882177771279][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:04:25][354882177771279][625 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.111/185.111/185.111/0.000 ms\n [2025-08-25 16:04:25][354882177771279][625 ms][DEBUG] check_internet: online [2025-08-25 16:04:25][354882177771279][625 ms][DEBUG] END check_internet in 281 ms [2025-08-25 16:04:25][354882177771279][625 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:04:25][354882177771279][626 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354882177771279\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6669\"}'\'' -e'"" [2025-08-25 16:04:25][354882177771279][626 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:04:25][354882177771279][626 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354882177771279\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6669\"}'\'' -e'"" [2025-08-25 16:04:29][354882177771279][4655 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be316e4b-6016-4315-aa9c-09ecf20bfac1","id":"QR_be316e4b-6016-4315-aa9c-09ecf20bfac1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:04:29][354882177771279][4811 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 16:04:29][354882177771279][4811 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 16:04:29][354882177771279][4811 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:04:31][357967974859406][0 ms][INFO] === Request start === [2025-08-25 16:04:31][357967974859406][1 ms][DEBUG] START check_scloud [2025-08-25 16:04:31][357967974859406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:04:32][357967974859406][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 1229 5013 23923796 138040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:04:32][357967974859406][251 ms][DEBUG] targetPkg: running [2025-08-25 16:04:32][357967974859406][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-25 16:04:32][357967974859406][251 ms][DEBUG] START check_boot_completed [2025-08-25 16:04:32][357967974859406][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:04:32][357967974859406][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:04:32][357967974859406][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:04:32][357967974859406][360 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 16:04:32][357967974859406][360 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:04:32][357967974859406][360 ms][DEBUG] START check_internet [2025-08-25 16:04:32][357967974859406][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:04:32][357967974859406][719 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.642/239.642/239.642/0.000 ms\n [2025-08-25 16:04:32][357967974859406][720 ms][DEBUG] check_internet: online [2025-08-25 16:04:32][357967974859406][720 ms][DEBUG] END check_internet in 359 ms [2025-08-25 16:04:32][357967974859406][720 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:04:32][357967974859406][720 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967974859406\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6850\"}'\'' -e'"" [2025-08-25 16:04:32][357967974859406][720 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:04:32][357967974859406][720 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967974859406\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6850\"}'\'' -e'"" [2025-08-25 16:04:36][357967974859406][4422 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_edff4efb-2b2a-4e12-98d1-bc1f08ac4a96","id":"QR_edff4efb-2b2a-4e12-98d1-bc1f08ac4a96","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:04:36][357967974859406][4578 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-25 16:04:36][357967974859406][4578 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 16:04:36][357967974859406][4578 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:06:05][354917591618092][1 ms][INFO] === Request start === [2025-08-25 16:06:05][354917591618092][1 ms][DEBUG] START check_scloud [2025-08-25 16:06:05][354917591618092][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:06:05][354917591618092][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 1229 5013 23958364 149544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:06:05][354917591618092][297 ms][DEBUG] targetPkg: running [2025-08-25 16:06:05][354917591618092][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 16:06:05][354917591618092][297 ms][DEBUG] START check_boot_completed [2025-08-25 16:06:05][354917591618092][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:06:05][354917591618092][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:06:05][354917591618092][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:06:05][354917591618092][392 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 16:06:05][354917591618092][392 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 16:06:05][354917591618092][393 ms][DEBUG] START check_internet [2025-08-25 16:06:05][354917591618092][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:06:06][354917591618092][937 ms][DEBUG] SU: done in 545 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.364/201.364/201.364/0.000 ms\n [2025-08-25 16:06:06][354917591618092][937 ms][DEBUG] check_internet: online [2025-08-25 16:06:06][354917591618092][938 ms][DEBUG] END check_internet in 545 ms [2025-08-25 16:06:06][354917591618092][938 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:06:06][354917591618092][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354917591618092\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6798\"}'\'' -e'"" [2025-08-25 16:06:06][354917591618092][938 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:06:06][354917591618092][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354917591618092\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6798\"}'\'' -e'"" [2025-08-25 16:06:09][354917591618092][4702 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 16:06:10][354917591618092][4858 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=107 [2025-08-25 16:06:10][354917591618092][4858 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-25 16:06:10][354917591618092][4858 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 16:06:10][][0 ms][INFO] === Request start === [2025-08-25 16:06:10][][1 ms][DEBUG] START check_scloud [2025-08-25 16:06:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:06:10][][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 1229 5013 24106904 160728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:06:10][][292 ms][DEBUG] targetPkg: running [2025-08-25 16:06:10][][292 ms][DEBUG] END check_scloud in 292 ms [2025-08-25 16:06:10][][292 ms][DEBUG] START check_boot_completed [2025-08-25 16:06:10][][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:06:10][][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:06:10][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:06:10][][401 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 16:06:10][][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:06:10][][402 ms][DEBUG] START check_internet [2025-08-25 16:06:10][][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:06:11][][667 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.721/153.721/153.721/0.000 ms\n [2025-08-25 16:06:11][][667 ms][DEBUG] check_internet: online [2025-08-25 16:06:11][][667 ms][DEBUG] END check_internet in 266 ms [2025-08-25 16:06:11][][667 ms][DEBUG] rawBody.length=1129 [2025-08-25 16:06:11][][667 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT9162X5B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7702\"}'\'' -e'"" [2025-08-25 16:06:11][][667 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:06:11][][667 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT9162X5B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7702\"}'\'' -e'"" [2025-08-25 16:06:14][][4119 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 16:06:14][][4275 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=107 [2025-08-25 16:06:14][][4275 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-25 16:06:14][][4275 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 16:06:16][354917591618092][0 ms][INFO] === Request start === [2025-08-25 16:06:16][354917591618092][1 ms][DEBUG] START check_scloud [2025-08-25 16:06:16][354917591618092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:06:16][354917591618092][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 1229 5013 24247264 171628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:06:16][354917591618092][264 ms][DEBUG] targetPkg: running [2025-08-25 16:06:16][354917591618092][264 ms][DEBUG] END check_scloud in 264 ms [2025-08-25 16:06:16][354917591618092][264 ms][DEBUG] START check_boot_completed [2025-08-25 16:06:16][354917591618092][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:06:16][354917591618092][311 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:06:16][354917591618092][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:06:16][354917591618092][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:06:16][354917591618092][358 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 16:06:16][354917591618092][358 ms][DEBUG] START check_internet [2025-08-25 16:06:16][354917591618092][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:06:17][354917591618092][624 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.531/136.531/136.531/0.000 ms\n [2025-08-25 16:06:17][354917591618092][624 ms][DEBUG] check_internet: online [2025-08-25 16:06:17][354917591618092][624 ms][DEBUG] END check_internet in 265 ms [2025-08-25 16:06:17][354917591618092][624 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:06:17][354917591618092][624 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354917591618092\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5376\"}'\'' -e'"" [2025-08-25 16:06:17][354917591618092][624 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:06:17][354917591618092][624 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354917591618092\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5376\"}'\'' -e'"" [2025-08-25 16:06:23][354917591618092][7028 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eef53c81-df57-47de-a4b6-23deb723a0ef","id":"QR_eef53c81-df57-47de-a4b6-23deb723a0ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:06:23][354917591618092][7184 ms][DEBUG] proc_open done in 6560 ms; code=255; res.len=3343 [2025-08-25 16:06:23][354917591618092][7184 ms][DEBUG] END runCmdUntilRes#1 in 6560 ms [2025-08-25 16:06:23][354917591618092][7184 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:06:29][355914468014470][0 ms][INFO] === Request start === [2025-08-25 16:06:29][355914468014470][1 ms][DEBUG] START check_scloud [2025-08-25 16:06:29][355914468014470][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:06:29][355914468014470][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 1229 5013 24408068 183152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:06:29][355914468014470][305 ms][DEBUG] targetPkg: running [2025-08-25 16:06:29][355914468014470][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 16:06:29][355914468014470][305 ms][DEBUG] START check_boot_completed [2025-08-25 16:06:29][355914468014470][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:06:29][355914468014470][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:06:29][355914468014470][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:06:29][355914468014470][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:06:29][355914468014470][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:06:29][355914468014470][399 ms][DEBUG] START check_internet [2025-08-25 16:06:29][355914468014470][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:06:29][355914468014470][696 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.384/199.384/199.384/0.000 ms\n [2025-08-25 16:06:29][355914468014470][696 ms][DEBUG] check_internet: online [2025-08-25 16:06:29][355914468014470][696 ms][DEBUG] END check_internet in 297 ms [2025-08-25 16:06:29][355914468014470][696 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:06:29][355914468014470][696 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355914468014470\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6792\"}'\'' -e'"" [2025-08-25 16:06:29][355914468014470][696 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:06:29][355914468014470][696 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355914468014470\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6792\"}'\'' -e'"" [2025-08-25 16:06:33][355914468014470][4726 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19bb7e42-f738-4b9d-ad6d-8c22d8a01ced","id":"QR_19bb7e42-f738-4b9d-ad6d-8c22d8a01ced","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:06:34][355914468014470][4882 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 16:06:34][355914468014470][4882 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 16:06:34][355914468014470][4882 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:07:02][356019741414833][0 ms][INFO] === Request start === [2025-08-25 16:07:02][356019741414833][1 ms][DEBUG] START check_scloud [2025-08-25 16:07:02][356019741414833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:07:03][356019741414833][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 1229 5013 24519840 194364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:07:03][356019741414833][283 ms][DEBUG] targetPkg: running [2025-08-25 16:07:03][356019741414833][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-25 16:07:03][356019741414833][283 ms][DEBUG] START check_boot_completed [2025-08-25 16:07:03][356019741414833][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:07:03][356019741414833][329 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:07:03][356019741414833][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:07:03][356019741414833][408 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 16:07:03][356019741414833][408 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 16:07:03][356019741414833][408 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:07:03][356019741414833][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019741414833\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2843\"}'\'' -e'"" [2025-08-25 16:07:03][356019741414833][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:07:03][356019741414833][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019741414833\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2843\"}'\'' -e'"" [2025-08-25 16:07:07][356019741414833][4328 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbffcd5f-b7c5-42f7-ae2f-bf04a0bfd436","id":"QR_dbffcd5f-b7c5-42f7-ae2f-bf04a0bfd436","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:07:07][356019741414833][4485 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-25 16:07:07][356019741414833][4485 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-25 16:07:07][356019741414833][4485 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:08:04][357967976124544][0 ms][INFO] === Request start === [2025-08-25 16:08:04][357967976124544][0 ms][DEBUG] START check_scloud [2025-08-25 16:08:04][357967976124544][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:08:04][357967976124544][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 1229 5013 24657796 206300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:08:04][357967976124544][303 ms][DEBUG] targetPkg: running [2025-08-25 16:08:04][357967976124544][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 16:08:04][357967976124544][303 ms][DEBUG] START check_boot_completed [2025-08-25 16:08:04][357967976124544][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:08:04][357967976124544][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:08:04][357967976124544][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:08:04][357967976124544][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:08:04][357967976124544][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 16:08:04][357967976124544][381 ms][DEBUG] START check_internet [2025-08-25 16:08:04][357967976124544][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:08:04][357967976124544][646 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.908/162.908/162.908/0.000 ms\n [2025-08-25 16:08:04][357967976124544][646 ms][DEBUG] check_internet: online [2025-08-25 16:08:04][357967976124544][646 ms][DEBUG] END check_internet in 266 ms [2025-08-25 16:08:04][357967976124544][646 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:08:04][357967976124544][646 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976124544\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5080\"}'\'' -e'"" [2025-08-25 16:08:04][357967976124544][646 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:08:04][357967976124544][647 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976124544\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5080\"}'\'' -e'"" [2025-08-25 16:08:08][357967976124544][4817 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ab36f87-2ad9-4b13-807a-2d450015ef41","id":"QR_8ab36f87-2ad9-4b13-807a-2d450015ef41","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:08:08][357967976124544][4974 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-08-25 16:08:08][357967976124544][4974 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-25 16:08:08][357967976124544][4974 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:08:11][359468671010722][1 ms][INFO] === Request start === [2025-08-25 16:08:11][359468671010722][1 ms][DEBUG] START check_scloud [2025-08-25 16:08:11][359468671010722][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:08:12][359468671010722][285 ms][DEBUG] SU: done in 283 ms; outu0_a118 1229 5013 24820876 217240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:08:12][359468671010722][285 ms][DEBUG] targetPkg: running [2025-08-25 16:08:12][359468671010722][285 ms][DEBUG] END check_scloud in 284 ms [2025-08-25 16:08:12][359468671010722][285 ms][DEBUG] START check_boot_completed [2025-08-25 16:08:12][359468671010722][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:08:12][359468671010722][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:08:12][359468671010722][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:08:12][359468671010722][409 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 16:08:12][359468671010722][409 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-25 16:08:12][359468671010722][409 ms][DEBUG] START check_internet [2025-08-25 16:08:12][359468671010722][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:08:12][359468671010722][815 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.724/247.724/247.724/0.000 ms\n [2025-08-25 16:08:12][359468671010722][816 ms][DEBUG] check_internet: online [2025-08-25 16:08:12][359468671010722][816 ms][DEBUG] END check_internet in 406 ms [2025-08-25 16:08:12][359468671010722][816 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:08:12][359468671010722][816 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468671010722\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7210\"}'\'' -e'"" [2025-08-25 16:08:12][359468671010722][816 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:08:12][359468671010722][816 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468671010722\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7210\"}'\'' -e'"" [2025-08-25 16:08:16][359468671010722][4486 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5bcaf442-fbfe-435e-afc6-0098dcab4fda","id":"QR_5bcaf442-fbfe-435e-afc6-0098dcab4fda","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:08:16][359468671010722][4642 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-08-25 16:08:16][359468671010722][4642 ms][DEBUG] END runCmdUntilRes#1 in 3826 ms [2025-08-25 16:08:16][359468671010722][4642 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:10:03][351272330978636][0 ms][INFO] === Request start === [2025-08-25 16:10:03][351272330978636][1 ms][DEBUG] START check_scloud [2025-08-25 16:10:03][351272330978636][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:10:03][351272330978636][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 1229 5013 24957260 229308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:10:03][351272330978636][253 ms][DEBUG] targetPkg: running [2025-08-25 16:10:03][351272330978636][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-25 16:10:03][351272330978636][253 ms][DEBUG] START check_boot_completed [2025-08-25 16:10:03][351272330978636][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:10:03][351272330978636][300 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:10:03][351272330978636][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:10:03][351272330978636][362 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:10:03][351272330978636][362 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:10:03][351272330978636][362 ms][DEBUG] START check_internet [2025-08-25 16:10:03][351272330978636][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:10:04][351272330978636][878 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.165/200.165/200.165/0.000 ms\n [2025-08-25 16:10:04][351272330978636][878 ms][DEBUG] check_internet: online [2025-08-25 16:10:04][351272330978636][878 ms][DEBUG] END check_internet in 516 ms [2025-08-25 16:10:04][351272330978636][878 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:10:04][351272330978636][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330978636\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7312\"}'\'' -e'"" [2025-08-25 16:10:04][351272330978636][878 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:10:04][351272330978636][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330978636\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7312\"}'\'' -e'"" [2025-08-25 16:10:08][351272330978636][5314 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b851b392-8ab4-4c28-9749-9c01060d1697","id":"QR_b851b392-8ab4-4c28-9749-9c01060d1697","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:10:09][351272330978636][5470 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-25 16:10:09][351272330978636][5470 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-25 16:10:09][351272330978636][5470 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:10:13][358558828242318][1 ms][INFO] === Request start === [2025-08-25 16:10:13][358558828242318][1 ms][DEBUG] START check_scloud [2025-08-25 16:10:13][358558828242318][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:10:13][358558828242318][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 1229 5013 25130452 241064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:10:13][358558828242318][292 ms][DEBUG] targetPkg: running [2025-08-25 16:10:13][358558828242318][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-25 16:10:13][358558828242318][292 ms][DEBUG] START check_boot_completed [2025-08-25 16:10:13][358558828242318][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:10:13][358558828242318][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:10:13][358558828242318][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:10:13][358558828242318][417 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 16:10:13][358558828242318][417 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 16:10:13][358558828242318][417 ms][DEBUG] START check_internet [2025-08-25 16:10:13][358558828242318][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:10:13][358558828242318][776 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.173/236.173/236.173/0.000 ms\n [2025-08-25 16:10:13][358558828242318][776 ms][DEBUG] check_internet: online [2025-08-25 16:10:13][358558828242318][776 ms][DEBUG] END check_internet in 359 ms [2025-08-25 16:10:13][358558828242318][776 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:10:13][358558828242318][776 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828242318\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6900\"}'\'' -e'"" [2025-08-25 16:10:13][358558828242318][776 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:10:13][358558828242318][776 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828242318\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6900\"}'\'' -e'"" [2025-08-25 16:10:21][358558828242318][8477 ms][DEBUG] proc_open done in 7701 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 16:10:21][358558828242318][8477 ms][DEBUG] END runCmdUntilRes#1 in 7701 ms [2025-08-25 16:10:21][358558828242318][8477 ms][WARN] Detected error: Process with pid 1229 either refused to load frida-agent, or terminated during injection [2025-08-25 16:10:21][358558828242318][8477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 16:10:21][358558828242318][8649 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 16:10:21][358558828242318][8649 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 16:10:21][358558828242318][8649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:10:22][358558828242318][8930 ms][DEBUG] SU: done in 281 ms; out [2025-08-25 16:10:22][358558828242318][8931 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:10:22][358558828242318][9149 ms][DEBUG] SU: done in 219 ms; out [2025-08-25 16:10:24][358558828242318][11164 ms][DEBUG] START check_boot_completed [2025-08-25 16:10:24][358558828242318][11164 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:10:24][358558828242318][11211 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:10:24][358558828242318][11211 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:10:24][358558828242318][11274 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 16:10:24][358558828242318][11274 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 16:10:27][358558828242318][14288 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 16:10:27][358558828242318][14289 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828242318\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6900\"}'\'' -e'"" [2025-08-25 16:10:28][358558828242318][15679 ms][DEBUG] proc_open done in 1390 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-25 16:10:28][358558828242318][15679 ms][DEBUG] END runCmdUntilRes#2 in 1391 ms [2025-08-25 16:10:28][358558828242318][15679 ms][WARN] Detected error 2; Reboot the device [2025-08-25 16:10:28][358558828242318][15679 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 16:10:29][358558828242318][16319 ms][DEBUG] SU: done in 640 ms; out [2025-08-25 16:11:04][358558828242318][0 ms][INFO] === Request start === [2025-08-25 16:11:04][358558828242318][1 ms][DEBUG] START check_scloud [2025-08-25 16:11:04][358558828242318][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:11:04][358558828242318][47 ms][DEBUG] SU: done in 46 ms; out [2025-08-25 16:11:04][358558828242318][47 ms][WARN] targetPkg: not running, restarting [2025-08-25 16:11:04][358558828242318][47 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:11:04][358558828242318][78 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 16:11:04][358558828242318][78 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:11:04][358558828242318][109 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 16:11:06][358558828242318][2124 ms][DEBUG] END check_scloud in 2124 ms [2025-08-25 16:11:06][358558828242318][2124 ms][DEBUG] START check_boot_completed [2025-08-25 16:11:06][358558828242318][2125 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:11:29][358558828242318][24500 ms][DEBUG] ADB: done in 22375 ms; out [2025-08-25 16:11:29][358558828242318][24500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:11:29][358558828242318][24595 ms][DEBUG] SU: done in 95 ms; out [2025-08-25 16:11:29][358558828242318][24595 ms][DEBUG] END check_boot_completed in 22470 ms [2025-08-25 16:11:29][358558828242318][24595 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:11:29][358558828242318][24595 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828242318\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9148\"}'\'' -e'"" [2025-08-25 16:11:29][358558828242318][24595 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:11:29][358558828242318][24595 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828242318\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9148\"}'\'' -e'"" [2025-08-25 16:11:32][358558828242318][27594 ms][DEBUG] proc_open done in 2999 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-25 16:11:32][358558828242318][27594 ms][DEBUG] END runCmdUntilRes#1 in 2999 ms [2025-08-25 16:11:32][358558828242318][27594 ms][WARN] Detected error: Process not found [2025-08-25 16:11:32][358558828242318][27594 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 16:11:32][358558828242318][27780 ms][DEBUG] SU: done in 186 ms; out [2025-08-25 16:11:32][358558828242318][27780 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 16:11:32][358558828242318][27780 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:11:32][358558828242318][28030 ms][DEBUG] SU: done in 250 ms; out [2025-08-25 16:11:32][358558828242318][28030 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:11:33][358558828242318][28343 ms][DEBUG] SU: done in 312 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 16:11:35][358558828242318][30358 ms][DEBUG] START check_boot_completed [2025-08-25 16:11:35][358558828242318][30358 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:11:37][358558828242318][32413 ms][DEBUG] ADB: done in 2055 ms; out [2025-08-25 16:11:37][358558828242318][32413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:11:37][358558828242318][32475 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:11:37][358558828242318][32475 ms][DEBUG] END check_boot_completed in 2117 ms [2025-08-25 16:11:40][358558828242318][35490 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 16:11:40][358558828242318][35490 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828242318\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9148\"}'\'' -e'"" [2025-08-25 16:12:05][358558828242318][0 ms][INFO] === Request start === [2025-08-25 16:12:05][358558828242318][1 ms][DEBUG] START check_scloud [2025-08-25 16:12:05][358558828242318][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:12:05][358558828242318][389 ms][DEBUG] SU: done in 388 ms; out [2025-08-25 16:12:05][358558828242318][389 ms][WARN] targetPkg: not running, restarting [2025-08-25 16:12:05][358558828242318][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:12:05][358558828242318][545 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 16:12:05][358558828242318][545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:12:06][358558828242318][733 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 16:12:08][358558828242318][2748 ms][DEBUG] END check_scloud in 2747 ms [2025-08-25 16:12:08][358558828242318][2748 ms][DEBUG] START check_boot_completed [2025-08-25 16:12:08][358558828242318][2748 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:12:08][358558828242318][2795 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:12:08][358558828242318][2795 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:12:08][358558828242318][2873 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 16:12:08][358558828242318][2873 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 16:12:08][358558828242318][2873 ms][DEBUG] START check_internet [2025-08-25 16:12:08][358558828242318][2873 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:12:08][358558828242318][3217 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=132 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 132.118/132.118/132.118/0.000 ms\n [2025-08-25 16:12:08][358558828242318][3217 ms][DEBUG] check_internet: online [2025-08-25 16:12:08][358558828242318][3217 ms][DEBUG] END check_internet in 344 ms [2025-08-25 16:12:08][358558828242318][3217 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:12:08][358558828242318][3217 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828242318\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3406\"}'\'' -e'"" [2025-08-25 16:12:08][358558828242318][3217 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:12:08][358558828242318][3217 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828242318\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3406\"}'\'' -e'"" [2025-08-25 16:12:15][358558828242318][10574 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c83abb66-d7fa-46a8-8af5-0238f4e64788","id":"QR_c83abb66-d7fa-46a8-8af5-0238f4e64788","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:12:16][358558828242318][10730 ms][DEBUG] proc_open done in 7513 ms; code=255; res.len=3343 [2025-08-25 16:12:16][358558828242318][10731 ms][DEBUG] END runCmdUntilRes#1 in 7514 ms [2025-08-25 16:12:16][358558828242318][10731 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:12:21][357648370855277][1 ms][INFO] === Request start === [2025-08-25 16:12:21][357648370855277][1 ms][DEBUG] START check_scloud [2025-08-25 16:12:21][357648370855277][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:12:21][357648370855277][438 ms][DEBUG] SU: done in 437 ms; outu0_a118 11486 4972 23700796 105512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:12:21][357648370855277][438 ms][DEBUG] targetPkg: running [2025-08-25 16:12:21][357648370855277][438 ms][DEBUG] END check_scloud in 437 ms [2025-08-25 16:12:21][357648370855277][438 ms][DEBUG] START check_boot_completed [2025-08-25 16:12:21][357648370855277][438 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:12:21][357648370855277][469 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:12:21][357648370855277][469 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:12:21][357648370855277][547 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 16:12:21][357648370855277][547 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:12:21][357648370855277][547 ms][DEBUG] START check_internet [2025-08-25 16:12:21][357648370855277][547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:12:21][357648370855277][829 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.844/138.844/138.844/0.000 ms\n [2025-08-25 16:12:21][357648370855277][829 ms][DEBUG] check_internet: online [2025-08-25 16:12:21][357648370855277][829 ms][DEBUG] END check_internet in 282 ms [2025-08-25 16:12:21][357648370855277][829 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:12:21][357648370855277][829 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357648370855277\",\"model\":\"SM-A156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1588\"}'\'' -e'"" [2025-08-25 16:12:21][357648370855277][829 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:12:21][357648370855277][829 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357648370855277\",\"model\":\"SM-A156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1588\"}'\'' -e'"" [2025-08-25 16:12:27][357648370855277][6952 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0de6285-70cf-4807-bced-182c0dd93039","id":"QR_b0de6285-70cf-4807-bced-182c0dd93039","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:12:28][357648370855277][7108 ms][DEBUG] proc_open done in 6279 ms; code=255; res.len=3343 [2025-08-25 16:12:28][357648370855277][7108 ms][DEBUG] END runCmdUntilRes#1 in 6279 ms [2025-08-25 16:12:28][357648370855277][7108 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:12:30][350152500783795][0 ms][INFO] === Request start === [2025-08-25 16:12:30][350152500783795][1 ms][DEBUG] START check_scloud [2025-08-25 16:12:30][350152500783795][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:12:30][350152500783795][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 11486 4972 23867024 93164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:12:30][350152500783795][318 ms][DEBUG] targetPkg: running [2025-08-25 16:12:30][350152500783795][318 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 16:12:30][350152500783795][318 ms][DEBUG] START check_boot_completed [2025-08-25 16:12:30][350152500783795][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:12:30][350152500783795][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:12:30][350152500783795][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:12:31][350152500783795][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:12:31][350152500783795][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:12:31][350152500783795][428 ms][DEBUG] START check_internet [2025-08-25 16:12:31][350152500783795][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:12:31][350152500783795][677 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=128 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 128.546/128.546/128.546/0.000 ms\n [2025-08-25 16:12:31][350152500783795][678 ms][DEBUG] check_internet: online [2025-08-25 16:12:31][350152500783795][678 ms][DEBUG] END check_internet in 250 ms [2025-08-25 16:12:31][350152500783795][678 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:12:31][350152500783795][678 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152500783795\",\"model\":\"SM-A536J\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2645\"}'\'' -e'"" [2025-08-25 16:12:31][350152500783795][678 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:12:31][350152500783795][678 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152500783795\",\"model\":\"SM-A536J\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2645\"}'\'' -e'"" [2025-08-25 16:12:35][350152500783795][4786 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55b9ebe6-8d2b-4c30-97a9-751e6f061116","id":"QR_55b9ebe6-8d2b-4c30-97a9-751e6f061116","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:12:35][350152500783795][4942 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 16:12:35][350152500783795][4942 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 16:12:35][350152500783795][4942 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:13:05][352233111610953][0 ms][INFO] === Request start === [2025-08-25 16:13:05][352233111610953][1 ms][DEBUG] START check_scloud [2025-08-25 16:13:05][352233111610953][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:13:06][352233111610953][387 ms][DEBUG] SU: done in 387 ms; out [2025-08-25 16:13:06][352233111610953][388 ms][WARN] targetPkg: not running, restarting [2025-08-25 16:13:06][352233111610953][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:13:06][352233111610953][604 ms][DEBUG] SU: done in 217 ms; out [2025-08-25 16:13:06][352233111610953][605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:13:06][352233111610953][856 ms][DEBUG] SU: done in 252 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 16:13:08][352233111610953][2869 ms][DEBUG] END check_scloud in 2869 ms [2025-08-25 16:13:08][352233111610953][2869 ms][DEBUG] START check_boot_completed [2025-08-25 16:13:08][352233111610953][2869 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:13:08][352233111610953][2916 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:13:08][352233111610953][2916 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:13:08][352233111610953][2979 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:13:08][352233111610953][2979 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 16:13:08][352233111610953][2979 ms][DEBUG] rawBody.length=1159 [2025-08-25 16:13:08][352233111610953][2979 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352233111610953\",\"model\":\"SM-T220\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9JT107PCKM\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3786\"}'\'' -e'"" [2025-08-25 16:13:08][352233111610953][2979 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:13:08][352233111610953][2979 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352233111610953\",\"model\":\"SM-T220\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9JT107PCKM\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3786\"}'\'' -e'"" [2025-08-25 16:13:10][352233111610953][5244 ms][DEBUG] proc_open done in 2265 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-25 16:13:10][352233111610953][5244 ms][DEBUG] END runCmdUntilRes#1 in 2265 ms [2025-08-25 16:13:10][352233111610953][5244 ms][WARN] Detected error: Process not found [2025-08-25 16:13:10][352233111610953][5244 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 16:13:11][352233111610953][5416 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 16:13:11][352233111610953][5416 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 16:13:11][352233111610953][5416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:13:11][352233111610953][5556 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 16:13:11][352233111610953][5556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:13:11][352233111610953][5713 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 16:13:13][352233111610953][7727 ms][DEBUG] START check_boot_completed [2025-08-25 16:13:13][352233111610953][7728 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:13:13][352233111610953][7774 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:13:13][352233111610953][7774 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:13:13][352233111610953][7837 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 16:13:13][352233111610953][7837 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 16:13:16][352233111610953][10852 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 16:13:16][352233111610953][10852 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352233111610953\",\"model\":\"SM-T220\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9JT107PCKM\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3786\"}'\'' -e'"" [2025-08-25 16:13:21][352233111610953][15351 ms][DEBUG] proc_open done in 4499 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-25 16:13:21][352233111610953][15351 ms][DEBUG] END runCmdUntilRes#2 in 4499 ms [2025-08-25 16:13:21][352233111610953][15351 ms][WARN] Detected error 2; Reboot the device [2025-08-25 16:13:21][352233111610953][15351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 16:13:24][352233111610953][19178 ms][DEBUG] SU: done in 3827 ms; out [2025-08-25 16:14:05][358893198071991][0 ms][INFO] === Request start === [2025-08-25 16:14:05][358893198071991][1 ms][DEBUG] START check_scloud [2025-08-25 16:14:05][358893198071991][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:14:05][358893198071991][40 ms][DEBUG] SU: done in 40 ms; out [2025-08-25 16:14:05][358893198071991][40 ms][WARN] targetPkg: not running, restarting [2025-08-25 16:14:05][358893198071991][40 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:14:05][358893198071991][72 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 16:14:05][358893198071991][72 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:14:06][358893198071991][103 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 16:14:08][358893198071991][2118 ms][DEBUG] END check_scloud in 2117 ms [2025-08-25 16:14:08][358893198071991][2118 ms][DEBUG] START check_boot_completed [2025-08-25 16:14:08][358893198071991][2118 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:14:22][358893198071991][16379 ms][DEBUG] ADB: done in 14261 ms; out [2025-08-25 16:14:22][358893198071991][16379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:14:22][358893198071991][16472 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 16:14:22][358893198071991][16472 ms][DEBUG] END check_boot_completed in 14354 ms [2025-08-25 16:14:22][358893198071991][16472 ms][DEBUG] START check_internet [2025-08-25 16:14:22][358893198071991][16472 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:14:22][358893198071991][16660 ms][DEBUG] SU: done in 187 ms; out [2025-08-25 16:14:22][358893198071991][16660 ms][WARN] check_internet: offline [2025-08-25 16:14:22][358893198071991][16660 ms][DEBUG] END check_internet in 187 ms [2025-08-25 16:14:52][350876473962065][1 ms][INFO] === Request start === [2025-08-25 16:14:52][350876473962065][1 ms][DEBUG] START check_scloud [2025-08-25 16:14:52][350876473962065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:14:52][350876473962065][310 ms][DEBUG] SU: done in 309 ms; out [2025-08-25 16:14:52][350876473962065][311 ms][WARN] targetPkg: not running, restarting [2025-08-25 16:14:52][350876473962065][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:14:52][350876473962065][451 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 16:14:52][350876473962065][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:14:53][350876473962065][670 ms][DEBUG] SU: done in 218 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 16:14:55][350876473962065][2685 ms][DEBUG] END check_scloud in 2684 ms [2025-08-25 16:14:55][350876473962065][2685 ms][DEBUG] START check_boot_completed [2025-08-25 16:14:55][350876473962065][2685 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:14:55][350876473962065][2716 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:14:55][350876473962065][2716 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:14:55][350876473962065][2778 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:14:55][350876473962065][2779 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 16:14:55][350876473962065][2779 ms][DEBUG] START check_internet [2025-08-25 16:14:55][350876473962065][2779 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:14:55][350876473962065][3044 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.366/144.366/144.366/0.000 ms\n [2025-08-25 16:14:55][350876473962065][3044 ms][DEBUG] check_internet: online [2025-08-25 16:14:55][350876473962065][3044 ms][DEBUG] END check_internet in 266 ms [2025-08-25 16:14:55][350876473962065][3044 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:14:55][350876473962065][3044 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876473962065\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8399\"}'\'' -e'"" [2025-08-25 16:14:55][350876473962065][3044 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:14:55][350876473962065][3044 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876473962065\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8399\"}'\'' -e'"" [2025-08-25 16:15:00][350876473962065][8027 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 16:15:00][350876473962065][8183 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=107 [2025-08-25 16:15:00][350876473962065][8183 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-08-25 16:15:00][350876473962065][8183 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 16:15:00][][0 ms][INFO] === Request start === [2025-08-25 16:15:00][][0 ms][DEBUG] START check_scloud [2025-08-25 16:15:00][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:15:01][][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 11375 5018 23894048 123984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:15:01][][313 ms][DEBUG] targetPkg: running [2025-08-25 16:15:01][][313 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 16:15:01][][313 ms][DEBUG] START check_boot_completed [2025-08-25 16:15:01][][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:15:01][][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:15:01][][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:15:01][][423 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 16:15:01][][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:15:01][][423 ms][DEBUG] rawBody.length=1129 [2025-08-25 16:15:01][][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXA3YNPDF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7038\"}'\'' -e'"" [2025-08-25 16:15:01][][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:15:01][][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXA3YNPDF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7038\"}'\'' -e'"" [2025-08-25 16:15:05][][4062 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 16:15:05][][4218 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=107 [2025-08-25 16:15:05][][4218 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-25 16:15:05][][4218 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 16:15:06][353809891306646][0 ms][INFO] === Request start === [2025-08-25 16:15:06][353809891306646][1 ms][DEBUG] START check_scloud [2025-08-25 16:15:06][353809891306646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:15:06][353809891306646][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 11375 5018 24028456 129796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:15:06][353809891306646][295 ms][DEBUG] targetPkg: running [2025-08-25 16:15:06][353809891306646][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-25 16:15:06][353809891306646][295 ms][DEBUG] START check_boot_completed [2025-08-25 16:15:06][353809891306646][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:15:06][353809891306646][341 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:15:06][353809891306646][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:15:06][353809891306646][390 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 16:15:06][353809891306646][390 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-25 16:15:06][353809891306646][390 ms][DEBUG] rawBody.length=1159 [2025-08-25 16:15:06][353809891306646][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809891306646\",\"model\":\"SM-T220\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9JT107PCKM\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8789\"}'\'' -e'"" [2025-08-25 16:15:06][353809891306646][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:15:06][353809891306646][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809891306646\",\"model\":\"SM-T220\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9JT107PCKM\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8789\"}'\'' -e'"" [2025-08-25 16:15:07][350876473962065][0 ms][INFO] === Request start === [2025-08-25 16:15:07][350876473962065][0 ms][DEBUG] START check_scloud [2025-08-25 16:15:07][350876473962065][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:15:07][350876473962065][282 ms][DEBUG] SU: done in 282 ms; outu0_a118 11375 5018 24028456 129796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:15:07][350876473962065][282 ms][DEBUG] targetPkg: running [2025-08-25 16:15:07][350876473962065][282 ms][DEBUG] END check_scloud in 282 ms [2025-08-25 16:15:07][350876473962065][282 ms][DEBUG] START check_boot_completed [2025-08-25 16:15:07][350876473962065][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:15:07][350876473962065][329 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:15:07][350876473962065][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:15:07][350876473962065][391 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:15:07][350876473962065][391 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:15:07][350876473962065][391 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:15:07][350876473962065][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876473962065\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4827\"}'\'' -e'"" [2025-08-25 16:15:07][350876473962065][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:15:07][350876473962065][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876473962065\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4827\"}'\'' -e'"" [2025-08-25 16:15:08][350876473962065][1172 ms][DEBUG] proc_open done in 781 ms (timeout); code=4; out.len=0 err.len=135 [2025-08-25 16:15:08][350876473962065][1173 ms][DEBUG] END runCmdUntilRes#1 in 781 ms [2025-08-25 16:15:08][350876473962065][1173 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 5435 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 5435 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-08-25 16:15:11][353809891306646][4637 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86d41eb2-9c5a-4a79-b474-8a362afb4b68","id":"QR_86d41eb2-9c5a-4a79-b474-8a362afb4b68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:15:11][353809891306646][4793 ms][DEBUG] proc_open done in 4402 ms; code=255; res.len=3343 [2025-08-25 16:15:11][353809891306646][4793 ms][DEBUG] END runCmdUntilRes#1 in 4403 ms [2025-08-25 16:15:11][353809891306646][4793 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:15:42][350876473962065][0 ms][INFO] === Request start === [2025-08-25 16:15:42][350876473962065][1 ms][DEBUG] START check_scloud [2025-08-25 16:15:42][350876473962065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:15:42][350876473962065][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 11375 5018 24069280 63728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:15:42][350876473962065][305 ms][DEBUG] targetPkg: running [2025-08-25 16:15:42][350876473962065][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 16:15:42][350876473962065][305 ms][DEBUG] START check_boot_completed [2025-08-25 16:15:42][350876473962065][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:15:42][350876473962065][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:15:42][350876473962065][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:15:42][350876473962065][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:15:42][350876473962065][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 16:15:42][350876473962065][383 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:15:42][350876473962065][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876473962065\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4962\"}'\'' -e'"" [2025-08-25 16:15:42][350876473962065][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:15:42][350876473962065][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876473962065\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4962\"}'\'' -e'"" [2025-08-25 16:15:46][350876473962065][4257 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 16:15:46][350876473962065][4413 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=107 [2025-08-25 16:15:46][350876473962065][4413 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-25 16:15:46][350876473962065][4413 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 16:15:47][][0 ms][INFO] === Request start === [2025-08-25 16:15:47][][1 ms][DEBUG] START check_scloud [2025-08-25 16:15:47][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:15:47][][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 11375 5018 24217896 82816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:15:47][][316 ms][DEBUG] targetPkg: running [2025-08-25 16:15:47][][316 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 16:15:47][][316 ms][DEBUG] START check_boot_completed [2025-08-25 16:15:47][][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:15:47][][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:15:47][][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:15:47][][441 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 16:15:47][][441 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 16:15:47][][441 ms][DEBUG] rawBody.length=1129 [2025-08-25 16:15:47][][441 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXA3YNPDF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1960\"}'\'' -e'"" [2025-08-25 16:15:47][][442 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:15:47][][442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXA3YNPDF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1960\"}'\'' -e'"" [2025-08-25 16:15:51][][4143 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 16:15:51][][4299 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=107 [2025-08-25 16:15:51][][4299 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 16:15:51][][4299 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 16:15:53][350876473962065][0 ms][INFO] === Request start === [2025-08-25 16:15:53][350876473962065][1 ms][DEBUG] START check_scloud [2025-08-25 16:15:53][350876473962065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:15:53][350876473962065][333 ms][DEBUG] SU: done in 332 ms; outu0_a118 11375 5018 24399408 90552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:15:53][350876473962065][333 ms][DEBUG] targetPkg: running [2025-08-25 16:15:53][350876473962065][333 ms][DEBUG] END check_scloud in 333 ms [2025-08-25 16:15:53][350876473962065][333 ms][DEBUG] START check_boot_completed [2025-08-25 16:15:53][350876473962065][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:15:53][350876473962065][380 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:15:53][350876473962065][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:15:53][350876473962065][427 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:15:53][350876473962065][427 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:15:53][350876473962065][427 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:15:53][350876473962065][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876473962065\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1760\"}'\'' -e'"" [2025-08-25 16:15:53][350876473962065][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:15:53][350876473962065][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876473962065\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1760\"}'\'' -e'"" [2025-08-25 16:15:58][350876473962065][5285 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55d2fd87-9cd2-4f34-aa2b-670f7b30f692","id":"QR_55d2fd87-9cd2-4f34-aa2b-670f7b30f692","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:15:58][350876473962065][5441 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-08-25 16:15:58][350876473962065][5441 ms][DEBUG] END runCmdUntilRes#1 in 5015 ms [2025-08-25 16:15:58][350876473962065][5441 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:16:30][350876473962065][0 ms][INFO] === Request start === [2025-08-25 16:16:30][350876473962065][1 ms][DEBUG] START check_scloud [2025-08-25 16:16:30][350876473962065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:16:31][350876473962065][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 11375 5018 24502600 63772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:16:31][350876473962065][318 ms][DEBUG] targetPkg: running [2025-08-25 16:16:31][350876473962065][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 16:16:31][350876473962065][318 ms][DEBUG] START check_boot_completed [2025-08-25 16:16:31][350876473962065][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:16:31][350876473962065][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:16:31][350876473962065][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:16:31][350876473962065][427 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 16:16:31][350876473962065][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:16:31][350876473962065][427 ms][DEBUG] START check_internet [2025-08-25 16:16:31][350876473962065][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:16:31][350876473962065][739 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.728/178.728/178.728/0.000 ms\n [2025-08-25 16:16:31][350876473962065][739 ms][DEBUG] check_internet: online [2025-08-25 16:16:31][350876473962065][739 ms][DEBUG] END check_internet in 312 ms [2025-08-25 16:16:31][350876473962065][739 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:16:31][350876473962065][740 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876473962065\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5492\"}'\'' -e'"" [2025-08-25 16:16:31][350876473962065][740 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:16:31][350876473962065][740 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876473962065\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5492\"}'\'' -e'"" [2025-08-25 16:16:35][350876473962065][5113 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 16:16:36][350876473962065][5269 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=107 [2025-08-25 16:16:36][350876473962065][5269 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-25 16:16:36][350876473962065][5269 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 16:16:36][][0 ms][INFO] === Request start === [2025-08-25 16:16:36][][1 ms][DEBUG] START check_scloud [2025-08-25 16:16:36][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:16:36][][290 ms][DEBUG] SU: done in 290 ms; outu0_a118 11375 5018 24665680 88356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:16:36][][291 ms][DEBUG] targetPkg: running [2025-08-25 16:16:36][][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-25 16:16:36][][291 ms][DEBUG] START check_boot_completed [2025-08-25 16:16:36][][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:16:36][][337 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:16:36][][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:16:36][][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:16:36][][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:16:36][][384 ms][DEBUG] START check_internet [2025-08-25 16:16:36][][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:16:37][][618 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.623/143.623/143.623/0.000 ms\n [2025-08-25 16:16:37][][619 ms][DEBUG] check_internet: online [2025-08-25 16:16:37][][619 ms][DEBUG] END check_internet in 235 ms [2025-08-25 16:16:37][][619 ms][DEBUG] rawBody.length=1129 [2025-08-25 16:16:37][][619 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXA3YNPDF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5747\"}'\'' -e'"" [2025-08-25 16:16:37][][619 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:16:37][][619 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXA3YNPDF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5747\"}'\'' -e'"" [2025-08-25 16:16:40][][4180 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 16:16:40][][4336 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=107 [2025-08-25 16:16:40][][4336 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-25 16:16:40][][4336 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 16:16:42][350876473962065][0 ms][INFO] === Request start === [2025-08-25 16:16:42][350876473962065][1 ms][DEBUG] START check_scloud [2025-08-25 16:16:42][350876473962065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:16:42][350876473962065][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 11375 5018 24819600 96932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:16:42][350876473962065][327 ms][DEBUG] targetPkg: running [2025-08-25 16:16:42][350876473962065][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-25 16:16:42][350876473962065][327 ms][DEBUG] START check_boot_completed [2025-08-25 16:16:42][350876473962065][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:16:42][350876473962065][373 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:16:42][350876473962065][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:16:43][350876473962065][436 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:16:43][350876473962065][436 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:16:43][350876473962065][436 ms][DEBUG] START check_internet [2025-08-25 16:16:43][350876473962065][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:16:43][350876473962065][717 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=134 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 134.309/134.309/134.309/0.000 ms\n [2025-08-25 16:16:43][350876473962065][717 ms][DEBUG] check_internet: online [2025-08-25 16:16:43][350876473962065][717 ms][DEBUG] END check_internet in 281 ms [2025-08-25 16:16:43][350876473962065][717 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:16:43][350876473962065][717 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876473962065\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2235\"}'\'' -e'"" [2025-08-25 16:16:43][350876473962065][717 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:16:43][350876473962065][717 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876473962065\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2235\"}'\'' -e'"" [2025-08-25 16:16:47][350876473962065][4622 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81f95b3a-2162-4109-b9b2-8407212b7cbf","id":"QR_81f95b3a-2162-4109-b9b2-8407212b7cbf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:16:47][350876473962065][4778 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-25 16:16:47][350876473962065][4778 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-25 16:16:47][350876473962065][4778 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:17:03][352682502944514][1 ms][INFO] === Request start === [2025-08-25 16:17:03][352682502944514][1 ms][DEBUG] START check_scloud [2025-08-25 16:17:03][352682502944514][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:17:03][352682502944514][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 11375 5018 24883168 110872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:17:03][352682502944514][317 ms][DEBUG] targetPkg: running [2025-08-25 16:17:03][352682502944514][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 16:17:03][352682502944514][317 ms][DEBUG] START check_boot_completed [2025-08-25 16:17:03][352682502944514][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:17:03][352682502944514][362 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 16:17:03][352682502944514][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:17:04][352682502944514][440 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 16:17:04][352682502944514][440 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-25 16:17:04][352682502944514][440 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:17:04][352682502944514][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502944514\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ILO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3932\"}'\'' -e'"" [2025-08-25 16:17:04][352682502944514][440 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:17:04][352682502944514][440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682502944514\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ILO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3932\"}'\'' -e'"" [2025-08-25 16:17:07][352682502944514][4252 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c22a8bb3-29c7-4912-a7f9-1e90b71690e0","id":"QR_c22a8bb3-29c7-4912-a7f9-1e90b71690e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:17:07][352682502944514][4408 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-08-25 16:17:07][352682502944514][4408 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-08-25 16:17:07][352682502944514][4408 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:17:10][350076122704865][0 ms][INFO] === Request start === [2025-08-25 16:17:10][350076122704865][1 ms][DEBUG] START check_scloud [2025-08-25 16:17:10][350076122704865][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:17:10][350076122704865][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 11375 5018 25007336 122724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:17:10][350076122704865][264 ms][DEBUG] targetPkg: running [2025-08-25 16:17:10][350076122704865][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-25 16:17:10][350076122704865][264 ms][DEBUG] START check_boot_completed [2025-08-25 16:17:10][350076122704865][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:17:10][350076122704865][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:17:10][350076122704865][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:17:10][350076122704865][359 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 16:17:10][350076122704865][359 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 16:17:10][350076122704865][359 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:17:10][350076122704865][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350076122704865\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8763\"}'\'' -e'"" [2025-08-25 16:17:10][350076122704865][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:17:10][350076122704865][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350076122704865\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8763\"}'\'' -e'"" [2025-08-25 16:17:14][350076122704865][4013 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2d6ce77-8284-4204-b668-17a3aa7ec474","id":"QR_c2d6ce77-8284-4204-b668-17a3aa7ec474","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:17:14][350076122704865][4169 ms][DEBUG] proc_open done in 3809 ms; code=255; res.len=3343 [2025-08-25 16:17:14][350076122704865][4169 ms][DEBUG] END runCmdUntilRes#1 in 3809 ms [2025-08-25 16:17:14][350076122704865][4169 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:17:17][350751172938031][0 ms][INFO] === Request start === [2025-08-25 16:17:17][350751172938031][1 ms][DEBUG] START check_scloud [2025-08-25 16:17:17][350751172938031][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:17:17][350751172938031][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 11375 5018 25172464 134996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:17:17][350751172938031][323 ms][DEBUG] targetPkg: running [2025-08-25 16:17:17][350751172938031][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-25 16:17:17][350751172938031][323 ms][DEBUG] START check_boot_completed [2025-08-25 16:17:17][350751172938031][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:17:17][350751172938031][370 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:17:17][350751172938031][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:17:17][350751172938031][418 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 16:17:17][350751172938031][418 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 16:17:17][350751172938031][418 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:17:17][350751172938031][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350751172938031\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3379\"}'\'' -e'"" [2025-08-25 16:17:17][350751172938031][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:17:17][350751172938031][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350751172938031\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3379\"}'\'' -e'"" [2025-08-25 16:17:21][350751172938031][4650 ms][DEBUG] proc_open done in 4231 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 16:17:21][350751172938031][4650 ms][DEBUG] END runCmdUntilRes#1 in 4231 ms [2025-08-25 16:17:21][350751172938031][4650 ms][WARN] Detected error: Process with pid 11375 either refused to load frida-agent, or terminated during injection [2025-08-25 16:17:21][350751172938031][4650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 16:17:22][350751172938031][4775 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 16:17:22][350751172938031][4775 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 16:17:22][350751172938031][4775 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:17:22][350751172938031][4947 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 16:17:22][350751172938031][4947 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:17:22][350751172938031][5134 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 16:17:24][350751172938031][7149 ms][DEBUG] START check_boot_completed [2025-08-25 16:17:24][350751172938031][7149 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:17:24][350751172938031][7196 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:17:24][350751172938031][7196 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:17:24][350751172938031][7243 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:17:24][350751172938031][7243 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 16:17:27][350751172938031][10258 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 16:17:27][350751172938031][10258 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350751172938031\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3379\"}'\'' -e'"" [2025-08-25 16:17:31][350751172938031][13976 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3aeb2d1c-2804-46d4-a824-5de82761bbee","id":"QR_3aeb2d1c-2804-46d4-a824-5de82761bbee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:17:31][350751172938031][14132 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-25 16:17:31][350751172938031][14132 ms][DEBUG] END runCmdUntilRes#2 in 3874 ms [2025-08-25 16:17:31][350751172938031][14132 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:17:35][352350274574089][0 ms][INFO] === Request start === [2025-08-25 16:17:35][352350274574089][1 ms][DEBUG] START check_scloud [2025-08-25 16:17:35][352350274574089][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:17:35][352350274574089][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 20066 5018 23787676 125812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:17:35][352350274574089][250 ms][DEBUG] targetPkg: running [2025-08-25 16:17:35][352350274574089][250 ms][DEBUG] END check_scloud in 250 ms [2025-08-25 16:17:35][352350274574089][251 ms][DEBUG] START check_boot_completed [2025-08-25 16:17:35][352350274574089][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:17:35][352350274574089][297 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:17:35][352350274574089][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:17:35][352350274574089][359 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:17:35][352350274574089][359 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:17:35][352350274574089][359 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:17:35][352350274574089][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350274574089\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1803\"}'\'' -e'"" [2025-08-25 16:17:35][352350274574089][359 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:17:35][352350274574089][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350274574089\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1803\"}'\'' -e'"" [2025-08-25 16:17:42][352350274574089][7139 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c25aa9f1-e3ca-4b71-990d-c531e9216982","id":"QR_c25aa9f1-e3ca-4b71-990d-c531e9216982","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:17:42][352350274574089][7295 ms][DEBUG] proc_open done in 6936 ms; code=255; res.len=3343 [2025-08-25 16:17:42][352350274574089][7295 ms][DEBUG] END runCmdUntilRes#1 in 6936 ms [2025-08-25 16:17:42][352350274574089][7295 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:19:03][352743953621025][0 ms][INFO] === Request start === [2025-08-25 16:19:03][352743953621025][1 ms][DEBUG] START check_scloud [2025-08-25 16:19:03][352743953621025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:19:04][352743953621025][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 20066 5018 23846932 138572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:19:04][352743953621025][303 ms][DEBUG] targetPkg: running [2025-08-25 16:19:04][352743953621025][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 16:19:04][352743953621025][303 ms][DEBUG] START check_boot_completed [2025-08-25 16:19:04][352743953621025][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:19:04][352743953621025][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:19:04][352743953621025][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:19:04][352743953621025][443 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 16:19:04][352743953621025][443 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 16:19:04][352743953621025][443 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:19:04][352743953621025][443 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743953621025\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7088\"}'\'' -e'"" [2025-08-25 16:19:04][352743953621025][444 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:19:04][352743953621025][444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743953621025\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7088\"}'\'' -e'"" [2025-08-25 16:19:08][352743953621025][4520 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40bff353-29bc-4f1a-a314-736599525e2f","id":"QR_40bff353-29bc-4f1a-a314-736599525e2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:19:08][352743953621025][4676 ms][DEBUG] proc_open done in 4232 ms; code=255; res.len=3343 [2025-08-25 16:19:08][352743953621025][4676 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 16:19:08][352743953621025][4676 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:19:11][354595801547820][1 ms][INFO] === Request start === [2025-08-25 16:19:11][354595801547820][1 ms][DEBUG] START check_scloud [2025-08-25 16:19:11][354595801547820][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:19:11][354595801547820][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 20066 5018 24005724 150232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:19:11][354595801547820][299 ms][DEBUG] targetPkg: running [2025-08-25 16:19:11][354595801547820][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 16:19:11][354595801547820][299 ms][DEBUG] START check_boot_completed [2025-08-25 16:19:11][354595801547820][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:19:11][354595801547820][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:19:11][354595801547820][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:19:11][354595801547820][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:19:11][354595801547820][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 16:19:11][354595801547820][377 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:19:11][354595801547820][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595801547820\",\"model\":\"SM-M336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2439\"}'\'' -e'"" [2025-08-25 16:19:11][354595801547820][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:19:11][354595801547820][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595801547820\",\"model\":\"SM-M336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2439\"}'\'' -e'"" [2025-08-25 16:19:15][354595801547820][4079 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3dbe5755-fd23-4fb2-80ba-3030347b6d88","id":"QR_3dbe5755-fd23-4fb2-80ba-3030347b6d88","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:19:15][354595801547820][4235 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-25 16:19:15][354595801547820][4235 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 16:19:15][354595801547820][4235 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:21:03][353520959245432][0 ms][INFO] === Request start === [2025-08-25 16:21:03][353520959245432][1 ms][DEBUG] START check_scloud [2025-08-25 16:21:03][353520959245432][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:21:04][353520959245432][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 20066 5018 24076424 161460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:21:04][353520959245432][267 ms][DEBUG] targetPkg: running [2025-08-25 16:21:04][353520959245432][267 ms][DEBUG] END check_scloud in 267 ms [2025-08-25 16:21:04][353520959245432][267 ms][DEBUG] START check_boot_completed [2025-08-25 16:21:04][353520959245432][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:21:04][353520959245432][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:21:04][353520959245432][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:21:04][353520959245432][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:21:04][353520959245432][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:21:04][353520959245432][361 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:21:04][353520959245432][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520959245432\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7617\"}'\'' -e'"" [2025-08-25 16:21:04][353520959245432][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:21:04][353520959245432][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520959245432\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7617\"}'\'' -e'"" [2025-08-25 16:21:07][353520959245432][4188 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a140350-3351-4d66-a79f-4a453c1fcb5a","id":"QR_9a140350-3351-4d66-a79f-4a453c1fcb5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:21:08][353520959245432][4344 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-25 16:21:08][353520959245432][4344 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 16:21:08][353520959245432][4345 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:21:11][354106248623461][0 ms][INFO] === Request start === [2025-08-25 16:21:11][354106248623461][1 ms][DEBUG] START check_scloud [2025-08-25 16:21:11][354106248623461][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:21:12][354106248623461][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 20066 5018 24233296 172200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:21:12][354106248623461][311 ms][DEBUG] targetPkg: running [2025-08-25 16:21:12][354106248623461][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 16:21:12][354106248623461][311 ms][DEBUG] START check_boot_completed [2025-08-25 16:21:12][354106248623461][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:21:12][354106248623461][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:21:12][354106248623461][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:21:12][354106248623461][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:21:12][354106248623461][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:21:12][354106248623461][404 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:21:12][354106248623461][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106248623461\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3242\"}'\'' -e'"" [2025-08-25 16:21:12][354106248623461][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:21:12][354106248623461][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106248623461\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3242\"}'\'' -e'"" [2025-08-25 16:21:18][354106248623461][6418 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e5e3829-4ead-4529-a0ab-0562bcc7769c","id":"QR_2e5e3829-4ead-4529-a0ab-0562bcc7769c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:21:18][354106248623461][6574 ms][DEBUG] proc_open done in 6170 ms; code=255; res.len=3343 [2025-08-25 16:21:18][354106248623461][6575 ms][DEBUG] END runCmdUntilRes#1 in 6170 ms [2025-08-25 16:21:18][354106248623461][6575 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:21:23][352334702692341][1 ms][INFO] === Request start === [2025-08-25 16:21:23][352334702692341][1 ms][DEBUG] START check_scloud [2025-08-25 16:21:23][352334702692341][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:21:23][352334702692341][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 20066 5018 24347060 183732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:21:23][352334702692341][296 ms][DEBUG] targetPkg: running [2025-08-25 16:21:23][352334702692341][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-25 16:21:23][352334702692341][296 ms][DEBUG] START check_boot_completed [2025-08-25 16:21:23][352334702692341][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:21:23][352334702692341][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:21:23][352334702692341][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:21:23][352334702692341][420 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 16:21:23][352334702692341][420 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-25 16:21:23][352334702692341][421 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:21:23][352334702692341][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334702692341\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3062\"}'\'' -e'"" [2025-08-25 16:21:23][352334702692341][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:21:23][352334702692341][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334702692341\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3062\"}'\'' -e'"" [2025-08-25 16:21:27][352334702692341][4279 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc3f7779-78a4-40bb-8198-1d39281707a8","id":"QR_cc3f7779-78a4-40bb-8198-1d39281707a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:21:27][352334702692341][4435 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-25 16:21:27][352334702692341][4435 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-25 16:21:27][352334702692341][4435 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:21:30][357967972992423][0 ms][INFO] === Request start === [2025-08-25 16:21:30][357967972992423][1 ms][DEBUG] START check_scloud [2025-08-25 16:21:30][357967972992423][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:21:30][357967972992423][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 20066 5018 24487484 194820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:21:30][357967972992423][289 ms][DEBUG] targetPkg: running [2025-08-25 16:21:30][357967972992423][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-25 16:21:30][357967972992423][289 ms][DEBUG] START check_boot_completed [2025-08-25 16:21:30][357967972992423][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:21:30][357967972992423][334 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 16:21:30][357967972992423][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:21:30][357967972992423][412 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 16:21:30][357967972992423][412 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-25 16:21:30][357967972992423][413 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:21:30][357967972992423][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972992423\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6306\"}'\'' -e'"" [2025-08-25 16:21:30][357967972992423][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:21:30][357967972992423][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972992423\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6306\"}'\'' -e'"" [2025-08-25 16:21:34][357967972992423][4255 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ef237c0f-ddb7-44e8-94ee-ef17397ede58","id":"QR_ef237c0f-ddb7-44e8-94ee-ef17397ede58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:21:34][357967972992423][4411 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-25 16:21:34][357967972992423][4411 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-25 16:21:34][357967972992423][4411 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:22:04][350915064231710][0 ms][INFO] === Request start === [2025-08-25 16:22:04][350915064231710][1 ms][DEBUG] START check_scloud [2025-08-25 16:22:04][350915064231710][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:22:05][350915064231710][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 20066 5018 24594192 206796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:22:05][350915064231710][287 ms][DEBUG] targetPkg: running [2025-08-25 16:22:05][350915064231710][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-25 16:22:05][350915064231710][287 ms][DEBUG] START check_boot_completed [2025-08-25 16:22:05][350915064231710][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:22:05][350915064231710][332 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 16:22:05][350915064231710][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:22:05][350915064231710][410 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 16:22:05][350915064231710][410 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-25 16:22:05][350915064231710][410 ms][DEBUG] START check_internet [2025-08-25 16:22:05][350915064231710][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:22:05][350915064231710][941 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.635/201.635/201.635/0.000 ms\n [2025-08-25 16:22:05][350915064231710][941 ms][DEBUG] check_internet: online [2025-08-25 16:22:05][350915064231710][941 ms][DEBUG] END check_internet in 531 ms [2025-08-25 16:22:05][350915064231710][941 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:22:05][350915064231710][941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915064231710\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8120\"}'\'' -e'"" [2025-08-25 16:22:05][350915064231710][941 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:22:05][350915064231710][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915064231710\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8120\"}'\'' -e'"" [2025-08-25 16:22:11][350915064231710][6393 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ad46dfd-5f26-418c-ac0f-8ba788c4bcbe","id":"QR_9ad46dfd-5f26-418c-ac0f-8ba788c4bcbe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:22:11][350915064231710][6549 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-08-25 16:22:11][350915064231710][6549 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-25 16:22:11][350915064231710][6549 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:22:22][352698477212810][0 ms][INFO] === Request start === [2025-08-25 16:22:22][352698477212810][1 ms][DEBUG] START check_scloud [2025-08-25 16:22:22][352698477212810][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:22:22][352698477212810][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 20066 5018 24746904 217412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:22:22][352698477212810][304 ms][DEBUG] targetPkg: running [2025-08-25 16:22:22][352698477212810][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 16:22:22][352698477212810][304 ms][DEBUG] START check_boot_completed [2025-08-25 16:22:22][352698477212810][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:22:22][352698477212810][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:22:22][352698477212810][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:22:22][352698477212810][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:22:22][352698477212810][412 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 16:22:22][352698477212810][412 ms][DEBUG] START check_internet [2025-08-25 16:22:22][352698477212810][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:22:23][352698477212810][726 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=212 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 212.224/212.224/212.224/0.000 ms\n [2025-08-25 16:22:23][352698477212810][726 ms][DEBUG] check_internet: online [2025-08-25 16:22:23][352698477212810][726 ms][DEBUG] END check_internet in 314 ms [2025-08-25 16:22:23][352698477212810][726 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:22:23][352698477212810][726 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698477212810\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7477\"}'\'' -e'"" [2025-08-25 16:22:23][352698477212810][726 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:22:23][352698477212810][726 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698477212810\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7477\"}'\'' -e'"" [2025-08-25 16:22:26][352698477212810][4458 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 16:22:27][352698477212810][4614 ms][DEBUG] proc_open done in 3888 ms; code=255; res.len=107 [2025-08-25 16:22:27][352698477212810][4614 ms][DEBUG] END runCmdUntilRes#1 in 3888 ms [2025-08-25 16:22:27][352698477212810][4614 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 16:22:27][][0 ms][INFO] === Request start === [2025-08-25 16:22:27][][1 ms][DEBUG] START check_scloud [2025-08-25 16:22:27][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:22:27][][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 20066 5018 24888956 228524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:22:27][][301 ms][DEBUG] targetPkg: running [2025-08-25 16:22:27][][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-25 16:22:27][][301 ms][DEBUG] START check_boot_completed [2025-08-25 16:22:27][][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:22:27][][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:22:27][][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:22:27][][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:22:27][][395 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 16:22:27][][395 ms][DEBUG] START check_internet [2025-08-25 16:22:27][][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:22:28][][660 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.560/145.560/145.560/0.000 ms\n [2025-08-25 16:22:28][][660 ms][DEBUG] check_internet: online [2025-08-25 16:22:28][][660 ms][DEBUG] END check_internet in 266 ms [2025-08-25 16:22:28][][660 ms][DEBUG] rawBody.length=1129 [2025-08-25 16:22:28][][660 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCWA2E3LQL\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3430\"}'\'' -e'"" [2025-08-25 16:22:28][][661 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:22:28][][661 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCWA2E3LQL\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3430\"}'\'' -e'"" [2025-08-25 16:22:31][][4050 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 16:22:31][][4206 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=107 [2025-08-25 16:22:31][][4206 ms][DEBUG] END runCmdUntilRes#1 in 3545 ms [2025-08-25 16:22:31][][4206 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 16:22:33][352698477212810][0 ms][INFO] === Request start === [2025-08-25 16:22:33][352698477212810][0 ms][DEBUG] START check_scloud [2025-08-25 16:22:33][352698477212810][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:22:33][352698477212810][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 20066 5018 25017224 240372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:22:33][352698477212810][311 ms][DEBUG] targetPkg: running [2025-08-25 16:22:33][352698477212810][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 16:22:33][352698477212810][311 ms][DEBUG] START check_boot_completed [2025-08-25 16:22:33][352698477212810][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:22:33][352698477212810][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:22:33][352698477212810][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:22:33][352698477212810][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:22:33][352698477212810][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:22:33][352698477212810][405 ms][DEBUG] START check_internet [2025-08-25 16:22:33][352698477212810][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:22:34][352698477212810][639 ms][DEBUG] SU: done in 235 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.774/145.774/145.774/0.000 ms\n [2025-08-25 16:22:34][352698477212810][639 ms][DEBUG] check_internet: online [2025-08-25 16:22:34][352698477212810][639 ms][DEBUG] END check_internet in 235 ms [2025-08-25 16:22:34][352698477212810][639 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:22:34][352698477212810][639 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698477212810\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5027\"}'\'' -e'"" [2025-08-25 16:22:34][352698477212810][639 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:22:34][352698477212810][639 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698477212810\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5027\"}'\'' -e'"" [2025-08-25 16:22:38][352698477212810][4482 ms][DEBUG] proc_open done in 3843 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 16:22:38][352698477212810][4482 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-25 16:22:38][352698477212810][4482 ms][WARN] Detected error: Process with pid 20066 either refused to load frida-agent, or terminated during injection [2025-08-25 16:22:38][352698477212810][4482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 16:22:38][352698477212810][4623 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 16:22:38][352698477212810][4623 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 16:22:38][352698477212810][4623 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:22:38][352698477212810][4747 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 16:22:38][352698477212810][4747 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:22:38][352698477212810][4889 ms][DEBUG] SU: done in 142 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 16:22:40][352698477212810][6903 ms][DEBUG] START check_boot_completed [2025-08-25 16:22:40][352698477212810][6903 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:22:40][352698477212810][6950 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:22:40][352698477212810][6950 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:22:40][352698477212810][6997 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:22:40][352698477212810][6997 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 16:22:43][352698477212810][10012 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 16:22:43][352698477212810][10012 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698477212810\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5027\"}'\'' -e'"" [2025-08-25 16:22:51][352698477212810][18213 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3cb62382-4890-48bf-87b7-f9f1c16e70e9","id":"QR_3cb62382-4890-48bf-87b7-f9f1c16e70e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:22:51][352698477212810][18369 ms][DEBUG] proc_open done in 8357 ms; code=255; res.len=3343 [2025-08-25 16:22:51][352698477212810][18369 ms][DEBUG] END runCmdUntilRes#2 in 8358 ms [2025-08-25 16:22:51][352698477212810][18369 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:23:04][353568694129668][0 ms][INFO] === Request start === [2025-08-25 16:23:04][353568694129668][1 ms][DEBUG] START check_scloud [2025-08-25 16:23:04][353568694129668][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:23:04][353568694129668][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 21433 5018 23831716 126480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:23:04][353568694129668][272 ms][DEBUG] targetPkg: running [2025-08-25 16:23:04][353568694129668][272 ms][DEBUG] END check_scloud in 272 ms [2025-08-25 16:23:04][353568694129668][272 ms][DEBUG] START check_boot_completed [2025-08-25 16:23:04][353568694129668][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:23:04][353568694129668][319 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:23:04][353568694129668][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:23:04][353568694129668][382 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:23:04][353568694129668][382 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:23:04][353568694129668][382 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:23:04][353568694129668][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353568694129668\",\"model\":\"SM-A235M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4861\"}'\'' -e'"" [2025-08-25 16:23:04][353568694129668][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:23:04][353568694129668][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353568694129668\",\"model\":\"SM-A235M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4861\"}'\'' -e'"" [2025-08-25 16:23:09][353568694129668][5302 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_288fe814-9d1a-496a-88a9-f8b29584e7ca","id":"QR_288fe814-9d1a-496a-88a9-f8b29584e7ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:23:09][353568694129668][5458 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-08-25 16:23:09][353568694129668][5458 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-08-25 16:23:09][353568694129668][5458 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:24:05][358226407521466][0 ms][INFO] === Request start === [2025-08-25 16:24:05][358226407521466][0 ms][DEBUG] START check_scloud [2025-08-25 16:24:05][358226407521466][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:24:05][358226407521466][254 ms][DEBUG] SU: done in 254 ms; outu0_a118 21433 5018 23870968 137308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:24:05][358226407521466][254 ms][DEBUG] targetPkg: running [2025-08-25 16:24:05][358226407521466][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-25 16:24:05][358226407521466][255 ms][DEBUG] START check_boot_completed [2025-08-25 16:24:05][358226407521466][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:24:05][358226407521466][301 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:24:05][358226407521466][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:24:05][358226407521466][364 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:24:05][358226407521466][364 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:24:05][358226407521466][364 ms][DEBUG] START check_internet [2025-08-25 16:24:05][358226407521466][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:24:05][358226407521466][692 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.637/225.637/225.637/0.000 ms\n [2025-08-25 16:24:05][358226407521466][692 ms][DEBUG] check_internet: online [2025-08-25 16:24:05][358226407521466][692 ms][DEBUG] END check_internet in 329 ms [2025-08-25 16:24:05][358226407521466][692 ms][DEBUG] rawBody.length=1158 [2025-08-25 16:24:05][358226407521466][692 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358226407521466\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTA0DN47K\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5105\"}'\'' -e'"" [2025-08-25 16:24:05][358226407521466][693 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:24:05][358226407521466][693 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358226407521466\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTA0DN47K\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5105\"}'\'' -e'"" [2025-08-25 16:24:10][358226407521466][5128 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_827ef0ba-c371-41bb-829b-f0fc3ec9f798","id":"QR_827ef0ba-c371-41bb-829b-f0fc3ec9f798","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:24:10][358226407521466][5284 ms][DEBUG] proc_open done in 4591 ms; code=255; res.len=3343 [2025-08-25 16:24:10][358226407521466][5284 ms][DEBUG] END runCmdUntilRes#1 in 4591 ms [2025-08-25 16:24:10][358226407521466][5284 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:24:14][353249144445265][0 ms][INFO] === Request start === [2025-08-25 16:24:14][353249144445265][1 ms][DEBUG] START check_scloud [2025-08-25 16:24:14][353249144445265][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:24:14][353249144445265][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 21433 5018 24021632 149060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:24:14][353249144445265][310 ms][DEBUG] targetPkg: running [2025-08-25 16:24:14][353249144445265][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 16:24:14][353249144445265][310 ms][DEBUG] START check_boot_completed [2025-08-25 16:24:14][353249144445265][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:24:14][353249144445265][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:24:14][353249144445265][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:24:14][353249144445265][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:24:14][353249144445265][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:24:14][353249144445265][419 ms][DEBUG] START check_internet [2025-08-25 16:24:14][353249144445265][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:24:15][353249144445265][747 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.245/192.245/192.245/0.000 ms\n [2025-08-25 16:24:15][353249144445265][747 ms][DEBUG] check_internet: online [2025-08-25 16:24:15][353249144445265][747 ms][DEBUG] END check_internet in 328 ms [2025-08-25 16:24:15][353249144445265][747 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:24:15][353249144445265][747 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249144445265\",\"model\":\"SM-F926B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"UYO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7293\"}'\'' -e'"" [2025-08-25 16:24:15][353249144445265][747 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:24:15][353249144445265][747 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249144445265\",\"model\":\"SM-F926B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"UYO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7293\"}'\'' -e'"" [2025-08-25 16:24:21][353249144445265][7121 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9af02c9a-2c6b-4b14-a457-0ed4a388ab84","id":"QR_9af02c9a-2c6b-4b14-a457-0ed4a388ab84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:24:21][353249144445265][7277 ms][DEBUG] proc_open done in 6529 ms; code=255; res.len=3343 [2025-08-25 16:24:21][353249144445265][7277 ms][DEBUG] END runCmdUntilRes#1 in 6529 ms [2025-08-25 16:24:21][353249144445265][7277 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:26:05][355151134540535][0 ms][INFO] === Request start === [2025-08-25 16:26:05][355151134540535][1 ms][DEBUG] START check_scloud [2025-08-25 16:26:05][355151134540535][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:26:05][355151134540535][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 21433 5018 24124020 160292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:26:05][355151134540535][308 ms][DEBUG] targetPkg: running [2025-08-25 16:26:05][355151134540535][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 16:26:05][355151134540535][308 ms][DEBUG] START check_boot_completed [2025-08-25 16:26:05][355151134540535][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:26:05][355151134540535][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:26:05][355151134540535][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:26:05][355151134540535][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:26:05][355151134540535][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:26:05][355151134540535][417 ms][DEBUG] START check_internet [2025-08-25 16:26:05][355151134540535][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:26:06][355151134540535][870 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.564/202.564/202.564/0.000 ms\n [2025-08-25 16:26:06][355151134540535][870 ms][DEBUG] check_internet: online [2025-08-25 16:26:06][355151134540535][870 ms][DEBUG] END check_internet in 453 ms [2025-08-25 16:26:06][355151134540535][870 ms][DEBUG] rawBody.length=1158 [2025-08-25 16:26:06][355151134540535][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355151134540535\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTB0JFR6T\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9873\"}'\'' -e'"" [2025-08-25 16:26:06][355151134540535][870 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:26:06][355151134540535][870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355151134540535\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTB0JFR6T\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9873\"}'\'' -e'"" [2025-08-25 16:26:10][355151134540535][4884 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54528d4c-453a-4850-97a7-1285769441be","id":"QR_54528d4c-453a-4850-97a7-1285769441be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:26:10][355151134540535][5041 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-25 16:26:10][355151134540535][5041 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-25 16:26:10][355151134540535][5041 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:26:14][356722918347054][1 ms][INFO] === Request start === [2025-08-25 16:26:14][356722918347054][1 ms][DEBUG] START check_scloud [2025-08-25 16:26:14][356722918347054][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:26:14][356722918347054][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 21433 5018 24263540 172092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:26:14][356722918347054][309 ms][DEBUG] targetPkg: running [2025-08-25 16:26:14][356722918347054][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 16:26:14][356722918347054][309 ms][DEBUG] START check_boot_completed [2025-08-25 16:26:14][356722918347054][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:26:14][356722918347054][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:26:14][356722918347054][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:26:14][356722918347054][404 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 16:26:14][356722918347054][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 16:26:14][356722918347054][405 ms][DEBUG] START check_internet [2025-08-25 16:26:14][356722918347054][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:26:14][356722918347054][699 ms][DEBUG] SU: done in 295 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.247/175.247/175.247/0.000 ms\n [2025-08-25 16:26:14][356722918347054][700 ms][DEBUG] check_internet: online [2025-08-25 16:26:14][356722918347054][700 ms][DEBUG] END check_internet in 295 ms [2025-08-25 16:26:14][356722918347054][700 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:26:14][356722918347054][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722918347054\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8769\"}'\'' -e'"" [2025-08-25 16:26:14][356722918347054][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:26:14][356722918347054][700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722918347054\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8769\"}'\'' -e'"" [2025-08-25 16:26:27][356722918347054][13509 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1015a64f-13b3-48cc-b0e8-8a161746bd3d","id":"QR_1015a64f-13b3-48cc-b0e8-8a161746bd3d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:26:27][356722918347054][13665 ms][DEBUG] proc_open done in 12966 ms; code=255; res.len=3343 [2025-08-25 16:26:27][356722918347054][13665 ms][DEBUG] END runCmdUntilRes#1 in 12966 ms [2025-08-25 16:26:27][356722918347054][13665 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:28:03][352192666559561][0 ms][INFO] === Request start === [2025-08-25 16:28:03][352192666559561][1 ms][DEBUG] START check_scloud [2025-08-25 16:28:03][352192666559561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:28:03][352192666559561][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 21433 5018 24386512 183404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:28:03][352192666559561][301 ms][DEBUG] targetPkg: running [2025-08-25 16:28:03][352192666559561][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-25 16:28:03][352192666559561][301 ms][DEBUG] START check_boot_completed [2025-08-25 16:28:03][352192666559561][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:28:03][352192666559561][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:28:03][352192666559561][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:28:03][352192666559561][426 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 16:28:03][352192666559561][426 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 16:28:03][352192666559561][426 ms][DEBUG] START check_internet [2025-08-25 16:28:03][352192666559561][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:28:04][352192666559561][722 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.022/153.022/153.022/0.000 ms\n [2025-08-25 16:28:04][352192666559561][723 ms][DEBUG] check_internet: online [2025-08-25 16:28:04][352192666559561][723 ms][DEBUG] END check_internet in 297 ms [2025-08-25 16:28:04][352192666559561][723 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:28:04][352192666559561][723 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192666559561\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3650\"}'\'' -e'"" [2025-08-25 16:28:04][352192666559561][723 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:28:04][352192666559561][723 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192666559561\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3650\"}'\'' -e'"" [2025-08-25 16:28:08][352192666559561][4643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e44b7fa9-c281-4458-90da-96ef224aa908","id":"QR_e44b7fa9-c281-4458-90da-96ef224aa908","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:28:08][352192666559561][4799 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-25 16:28:08][352192666559561][4799 ms][DEBUG] END runCmdUntilRes#1 in 4076 ms [2025-08-25 16:28:08][352192666559561][4800 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:33:03][355241322020455][1 ms][INFO] === Request start === [2025-08-25 16:33:03][355241322020455][1 ms][DEBUG] START check_scloud [2025-08-25 16:33:03][355241322020455][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:33:03][355241322020455][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 21433 5018 24498356 195028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:33:03][355241322020455][308 ms][DEBUG] targetPkg: running [2025-08-25 16:33:03][355241322020455][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 16:33:03][355241322020455][308 ms][DEBUG] START check_boot_completed [2025-08-25 16:33:03][355241322020455][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:33:03][355241322020455][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:33:03][355241322020455][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:33:03][355241322020455][401 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:33:03][355241322020455][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 16:33:03][355241322020455][401 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:33:03][355241322020455][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241322020455\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8693\"}'\'' -e'"" [2025-08-25 16:33:03][355241322020455][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:33:03][355241322020455][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241322020455\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8693\"}'\'' -e'"" [2025-08-25 16:33:08][355241322020455][5072 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b99ebeee-0e1c-4ac4-a61b-b188f81b034c","id":"QR_b99ebeee-0e1c-4ac4-a61b-b188f81b034c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:33:08][355241322020455][5228 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-08-25 16:33:08][355241322020455][5229 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-08-25 16:33:08][355241322020455][5229 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:34:04][357829462835191][0 ms][INFO] === Request start === [2025-08-25 16:34:04][357829462835191][1 ms][DEBUG] START check_scloud [2025-08-25 16:34:04][357829462835191][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:34:05][357829462835191][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 21433 5018 24612248 206428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:34:05][357829462835191][324 ms][DEBUG] targetPkg: running [2025-08-25 16:34:05][357829462835191][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-25 16:34:05][357829462835191][324 ms][DEBUG] START check_boot_completed [2025-08-25 16:34:05][357829462835191][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:34:05][357829462835191][371 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:34:05][357829462835191][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:34:05][357829462835191][433 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:34:05][357829462835191][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:34:05][357829462835191][433 ms][DEBUG] START check_internet [2025-08-25 16:34:05][357829462835191][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:34:05][357829462835191][902 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.387/203.387/203.387/0.000 ms\n [2025-08-25 16:34:05][357829462835191][902 ms][DEBUG] check_internet: online [2025-08-25 16:34:05][357829462835191][902 ms][DEBUG] END check_internet in 469 ms [2025-08-25 16:34:05][357829462835191][902 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:34:05][357829462835191][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357829462835191\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3643\"}'\'' -e'"" [2025-08-25 16:34:05][357829462835191][902 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:34:05][357829462835191][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357829462835191\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3643\"}'\'' -e'"" [2025-08-25 16:34:10][357829462835191][5947 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7257b18d-2737-4ec1-ad07-12c1d400be8a","id":"QR_7257b18d-2737-4ec1-ad07-12c1d400be8a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:34:11][357829462835191][6103 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-08-25 16:34:11][357829462835191][6104 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-08-25 16:34:11][357829462835191][6104 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:35:03][357674435537296][0 ms][INFO] === Request start === [2025-08-25 16:35:03][357674435537296][1 ms][DEBUG] START check_scloud [2025-08-25 16:35:03][357674435537296][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:35:04][357674435537296][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 21433 5018 24744572 217116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:35:04][357674435537296][315 ms][DEBUG] targetPkg: running [2025-08-25 16:35:04][357674435537296][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 16:35:04][357674435537296][315 ms][DEBUG] START check_boot_completed [2025-08-25 16:35:04][357674435537296][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:35:04][357674435537296][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:35:04][357674435537296][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:35:04][357674435537296][410 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 16:35:04][357674435537296][410 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 16:35:04][357674435537296][410 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:35:04][357674435537296][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674435537296\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6496\"}'\'' -e'"" [2025-08-25 16:35:04][357674435537296][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:35:04][357674435537296][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674435537296\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6496\"}'\'' -e'"" [2025-08-25 16:35:08][357674435537296][4517 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18bc85f8-6768-443f-8c73-a1a5723b4306","id":"QR_18bc85f8-6768-443f-8c73-a1a5723b4306","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:35:08][357674435537296][4673 ms][DEBUG] proc_open done in 4263 ms; code=255; res.len=3343 [2025-08-25 16:35:08][357674435537296][4673 ms][DEBUG] END runCmdUntilRes#1 in 4263 ms [2025-08-25 16:35:08][357674435537296][4673 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:35:11][351240642297615][1 ms][INFO] === Request start === [2025-08-25 16:35:11][351240642297615][1 ms][DEBUG] START check_scloud [2025-08-25 16:35:11][351240642297615][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:35:11][351240642297615][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 21433 5018 24882948 228512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:35:11][351240642297615][289 ms][DEBUG] targetPkg: running [2025-08-25 16:35:11][351240642297615][290 ms][DEBUG] END check_scloud in 288 ms [2025-08-25 16:35:11][351240642297615][290 ms][DEBUG] START check_boot_completed [2025-08-25 16:35:11][351240642297615][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:35:11][351240642297615][321 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:35:11][351240642297615][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:35:11][351240642297615][368 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:35:11][351240642297615][368 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 16:35:11][351240642297615][368 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:35:11][351240642297615][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642297615\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8236\"}'\'' -e'"" [2025-08-25 16:35:11][351240642297615][368 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:35:11][351240642297615][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642297615\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8236\"}'\'' -e'"" [2025-08-25 16:35:15][351240642297615][4445 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8c4a342-5a2b-46ba-bb7e-ca9d44ebfc73","id":"QR_f8c4a342-5a2b-46ba-bb7e-ca9d44ebfc73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:35:15][351240642297615][4601 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 16:35:15][351240642297615][4601 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 16:35:15][351240642297615][4601 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:35:18][356414815312205][0 ms][INFO] === Request start === [2025-08-25 16:35:18][356414815312205][1 ms][DEBUG] START check_scloud [2025-08-25 16:35:18][356414815312205][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:35:18][356414815312205][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 21433 5018 25042884 238760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:35:18][356414815312205][293 ms][DEBUG] targetPkg: running [2025-08-25 16:35:18][356414815312205][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-25 16:35:18][356414815312205][293 ms][DEBUG] START check_boot_completed [2025-08-25 16:35:18][356414815312205][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:35:18][356414815312205][340 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:35:18][356414815312205][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:35:18][356414815312205][418 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 16:35:18][356414815312205][418 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 16:35:18][356414815312205][418 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:35:18][356414815312205][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815312205\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5014\"}'\'' -e'"" [2025-08-25 16:35:18][356414815312205][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:35:18][356414815312205][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815312205\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5014\"}'\'' -e'"" [2025-08-25 16:35:22][356414815312205][4432 ms][DEBUG] proc_open done in 4014 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 16:35:22][356414815312205][4432 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-25 16:35:22][356414815312205][4432 ms][WARN] Detected error: Process with pid 21433 either refused to load frida-agent, or terminated during injection [2025-08-25 16:35:22][356414815312205][4432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 16:35:22][356414815312205][4573 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 16:35:22][356414815312205][4573 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 16:35:22][356414815312205][4573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:35:22][356414815312205][4714 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 16:35:22][356414815312205][4714 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:35:22][356414815312205][4870 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 16:35:24][356414815312205][6885 ms][DEBUG] START check_boot_completed [2025-08-25 16:35:24][356414815312205][6885 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:35:25][356414815312205][6932 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:35:25][356414815312205][6932 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:35:25][356414815312205][6994 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:35:25][356414815312205][6994 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 16:35:28][356414815312205][10009 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 16:35:28][356414815312205][10009 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815312205\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5014\"}'\'' -e'"" [2025-08-25 16:35:31][356414815312205][13664 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_875f6745-33ab-4e85-8726-e646568fd03e","id":"QR_875f6745-33ab-4e85-8726-e646568fd03e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:35:31][356414815312205][13821 ms][DEBUG] proc_open done in 3812 ms; code=255; res.len=3343 [2025-08-25 16:35:31][356414815312205][13821 ms][DEBUG] END runCmdUntilRes#2 in 3812 ms [2025-08-25 16:35:31][356414815312205][13821 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:35:34][351270415876253][0 ms][INFO] === Request start === [2025-08-25 16:35:34][351270415876253][1 ms][DEBUG] START check_scloud [2025-08-25 16:35:34][351270415876253][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:35:34][351270415876253][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 22916 5018 23853212 123784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:35:34][351270415876253][260 ms][DEBUG] targetPkg: running [2025-08-25 16:35:34][351270415876253][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-25 16:35:34][351270415876253][260 ms][DEBUG] START check_boot_completed [2025-08-25 16:35:34][351270415876253][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:35:34][351270415876253][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:35:34][351270415876253][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:35:34][351270415876253][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:35:34][351270415876253][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:35:34][351270415876253][354 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:35:34][351270415876253][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415876253\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9171\"}'\'' -e'"" [2025-08-25 16:35:34][351270415876253][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:35:34][351270415876253][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415876253\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9171\"}'\'' -e'"" [2025-08-25 16:35:38][351270415876253][4134 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff147c1c-d955-46fe-ad15-3dca6e0ee408","id":"QR_ff147c1c-d955-46fe-ad15-3dca6e0ee408","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:35:38][351270415876253][4290 ms][DEBUG] proc_open done in 3937 ms; code=255; res.len=3343 [2025-08-25 16:35:38][351270415876253][4290 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-25 16:35:38][351270415876253][4290 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:36:04][357967977079861][0 ms][INFO] === Request start === [2025-08-25 16:36:04][357967977079861][1 ms][DEBUG] START check_scloud [2025-08-25 16:36:04][357967977079861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:36:04][357967977079861][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 22916 5018 23929848 137780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:36:04][357967977079861][282 ms][DEBUG] targetPkg: running [2025-08-25 16:36:04][357967977079861][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-25 16:36:04][357967977079861][282 ms][DEBUG] START check_boot_completed [2025-08-25 16:36:04][357967977079861][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:36:04][357967977079861][328 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:36:04][357967977079861][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:36:04][357967977079861][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:36:04][357967977079861][376 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 16:36:04][357967977079861][376 ms][DEBUG] START check_internet [2025-08-25 16:36:04][357967977079861][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:36:05][357967977079861][844 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.317/202.317/202.317/0.000 ms\n [2025-08-25 16:36:05][357967977079861][844 ms][DEBUG] check_internet: online [2025-08-25 16:36:05][357967977079861][844 ms][DEBUG] END check_internet in 468 ms [2025-08-25 16:36:05][357967977079861][844 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:36:05][357967977079861][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967977079861\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8059\"}'\'' -e'"" [2025-08-25 16:36:05][357967977079861][844 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:36:05][357967977079861][844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967977079861\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8059\"}'\'' -e'"" [2025-08-25 16:36:09][357967977079861][5343 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_170916f5-e3c2-4ba4-ace6-6ea3920acc3c","id":"QR_170916f5-e3c2-4ba4-ace6-6ea3920acc3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:36:09][357967977079861][5499 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-08-25 16:36:09][357967977079861][5499 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-08-25 16:36:09][357967977079861][5499 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:37:04][352857781017949][0 ms][INFO] === Request start === [2025-08-25 16:37:04][352857781017949][1 ms][DEBUG] START check_scloud [2025-08-25 16:37:04][352857781017949][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:37:04][352857781017949][262 ms][DEBUG] SU: done in 262 ms; outu0_a118 22916 5018 24086812 149248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:37:04][352857781017949][263 ms][DEBUG] targetPkg: running [2025-08-25 16:37:04][352857781017949][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-25 16:37:04][352857781017949][263 ms][DEBUG] START check_boot_completed [2025-08-25 16:37:04][352857781017949][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:37:04][352857781017949][294 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:37:04][352857781017949][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:37:04][352857781017949][341 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:37:04][352857781017949][341 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 16:37:04][352857781017949][341 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:37:04][352857781017949][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352857781017949\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2082\"}'\'' -e'"" [2025-08-25 16:37:04][352857781017949][341 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:37:04][352857781017949][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352857781017949\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2082\"}'\'' -e'"" [2025-08-25 16:37:08][352857781017949][4355 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3ce13056-af20-49c2-af33-f153964ec19b","id":"QR_3ce13056-af20-49c2-af33-f153964ec19b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:37:08][352857781017949][4512 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-25 16:37:08][352857781017949][4512 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-25 16:37:08][352857781017949][4512 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:39:05][357242414811122][1 ms][INFO] === Request start === [2025-08-25 16:39:05][357242414811122][1 ms][DEBUG] START check_scloud [2025-08-25 16:39:05][357242414811122][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:39:05][357242414811122][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 22916 5018 24229328 160380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:39:05][357242414811122][303 ms][DEBUG] targetPkg: running [2025-08-25 16:39:05][357242414811122][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 16:39:05][357242414811122][303 ms][DEBUG] START check_boot_completed [2025-08-25 16:39:05][357242414811122][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:39:05][357242414811122][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:39:05][357242414811122][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:39:05][357242414811122][382 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 16:39:05][357242414811122][382 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 16:39:05][357242414811122][382 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:39:05][357242414811122][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357242414811122\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3290\"}'\'' -e'"" [2025-08-25 16:39:05][357242414811122][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:39:05][357242414811122][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357242414811122\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3290\"}'\'' -e'"" [2025-08-25 16:39:10][357242414811122][5442 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8475b65e-9d85-4eaf-99e4-2ebf3b11eb20","id":"QR_8475b65e-9d85-4eaf-99e4-2ebf3b11eb20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:39:10][357242414811122][5598 ms][DEBUG] proc_open done in 5216 ms; code=255; res.len=3343 [2025-08-25 16:39:10][357242414811122][5598 ms][DEBUG] END runCmdUntilRes#1 in 5216 ms [2025-08-25 16:39:10][357242414811122][5598 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:40:03][359122720272524][1 ms][INFO] === Request start === [2025-08-25 16:40:03][359122720272524][1 ms][DEBUG] START check_scloud [2025-08-25 16:40:03][359122720272524][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:40:03][359122720272524][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 22916 5018 24342964 171160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:40:03][359122720272524][313 ms][DEBUG] targetPkg: running [2025-08-25 16:40:03][359122720272524][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 16:40:03][359122720272524][313 ms][DEBUG] START check_boot_completed [2025-08-25 16:40:03][359122720272524][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:40:03][359122720272524][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:40:03][359122720272524][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:40:03][359122720272524][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:40:03][359122720272524][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:40:03][359122720272524][422 ms][DEBUG] START check_internet [2025-08-25 16:40:03][359122720272524][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:40:04][359122720272524][891 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.613/201.613/201.613/0.000 ms\n [2025-08-25 16:40:04][359122720272524][891 ms][DEBUG] check_internet: online [2025-08-25 16:40:04][359122720272524][891 ms][DEBUG] END check_internet in 469 ms [2025-08-25 16:40:04][359122720272524][891 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:40:04][359122720272524][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359122720272524\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4444\"}'\'' -e'"" [2025-08-25 16:40:04][359122720272524][891 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:40:04][359122720272524][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359122720272524\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4444\"}'\'' -e'"" [2025-08-25 16:40:08][359122720272524][5218 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46addb6e-665f-441c-876d-e0a58a476e25","id":"QR_46addb6e-665f-441c-876d-e0a58a476e25","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:40:08][359122720272524][5374 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-08-25 16:40:08][359122720272524][5374 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-25 16:40:08][359122720272524][5375 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:40:11][352623853357591][0 ms][INFO] === Request start === [2025-08-25 16:40:11][352623853357591][1 ms][DEBUG] START check_scloud [2025-08-25 16:40:11][352623853357591][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:40:11][352623853357591][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 22916 5018 24522428 183056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:40:11][352623853357591][314 ms][DEBUG] targetPkg: running [2025-08-25 16:40:11][352623853357591][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 16:40:11][352623853357591][314 ms][DEBUG] START check_boot_completed [2025-08-25 16:40:11][352623853357591][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:40:11][352623853357591][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:40:11][352623853357591][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:40:11][352623853357591][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:40:11][352623853357591][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:40:11][352623853357591][408 ms][DEBUG] START check_internet [2025-08-25 16:40:11][352623853357591][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:40:12][352623853357591][642 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.274/140.274/140.274/0.000 ms\n [2025-08-25 16:40:12][352623853357591][642 ms][DEBUG] check_internet: online [2025-08-25 16:40:12][352623853357591][642 ms][DEBUG] END check_internet in 234 ms [2025-08-25 16:40:12][352623853357591][642 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:40:12][352623853357591][642 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623853357591\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3108\"}'\'' -e'"" [2025-08-25 16:40:12][352623853357591][642 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:40:12][352623853357591][642 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623853357591\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3108\"}'\'' -e'"" [2025-08-25 16:40:15][352623853357591][4344 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_726d202a-792b-42f6-bbe2-a5b382f7e4bf","id":"QR_726d202a-792b-42f6-bbe2-a5b382f7e4bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:40:15][352623853357591][4500 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-25 16:40:15][352623853357591][4501 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 16:40:15][352623853357591][4501 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:42:04][351240643224246][1 ms][INFO] === Request start === [2025-08-25 16:42:04][351240643224246][1 ms][DEBUG] START check_scloud [2025-08-25 16:42:04][351240643224246][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:42:04][351240643224246][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 22916 5018 24658812 194440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:42:04][351240643224246][304 ms][DEBUG] targetPkg: running [2025-08-25 16:42:04][351240643224246][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 16:42:04][351240643224246][304 ms][DEBUG] START check_boot_completed [2025-08-25 16:42:04][351240643224246][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:42:04][351240643224246][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:42:04][351240643224246][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:42:04][351240643224246][413 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 16:42:04][351240643224246][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:42:04][351240643224246][413 ms][DEBUG] START check_internet [2025-08-25 16:42:04][351240643224246][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:42:04][351240643224246][741 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.982/187.982/187.982/0.000 ms\n [2025-08-25 16:42:04][351240643224246][741 ms][DEBUG] check_internet: online [2025-08-25 16:42:04][351240643224246][741 ms][DEBUG] END check_internet in 328 ms [2025-08-25 16:42:04][351240643224246][741 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:42:04][351240643224246][741 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643224246\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1013\"}'\'' -e'"" [2025-08-25 16:42:04][351240643224246][741 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:42:04][351240643224246][741 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643224246\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1013\"}'\'' -e'"" [2025-08-25 16:42:09][351240643224246][4818 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9007aa1-f04f-49bb-8e36-8d54eab16f94","id":"QR_d9007aa1-f04f-49bb-8e36-8d54eab16f94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:42:09][351240643224246][4974 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-25 16:42:09][351240643224246][4974 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 16:42:09][351240643224246][4974 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:43:03][355060831577759][0 ms][INFO] === Request start === [2025-08-25 16:43:03][355060831577759][1 ms][DEBUG] START check_scloud [2025-08-25 16:43:03][355060831577759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:43:03][355060831577759][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 22916 5018 24801248 206764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:43:03][355060831577759][290 ms][DEBUG] targetPkg: running [2025-08-25 16:43:03][355060831577759][290 ms][DEBUG] END check_scloud in 290 ms [2025-08-25 16:43:03][355060831577759][290 ms][DEBUG] START check_boot_completed [2025-08-25 16:43:03][355060831577759][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:43:03][355060831577759][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:43:03][355060831577759][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:43:03][355060831577759][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:43:03][355060831577759][383 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:43:03][355060831577759][384 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:43:03][355060831577759][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060831577759\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9468\"}'\'' -e'"" [2025-08-25 16:43:03][355060831577759][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:43:03][355060831577759][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060831577759\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9468\"}'\'' -e'"" [2025-08-25 16:43:07][355060831577759][4304 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aecb79eb-9beb-482d-af15-22db00492057","id":"QR_aecb79eb-9beb-482d-af15-22db00492057","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:43:07][355060831577759][4460 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-25 16:43:07][355060831577759][4460 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-25 16:43:07][355060831577759][4461 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:44:03][355320548641540][0 ms][INFO] === Request start === [2025-08-25 16:44:03][355320548641540][1 ms][DEBUG] START check_scloud [2025-08-25 16:44:03][355320548641540][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:44:04][355320548641540][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 22916 5018 24952004 217524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:44:04][355320548641540][317 ms][DEBUG] targetPkg: running [2025-08-25 16:44:04][355320548641540][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 16:44:04][355320548641540][317 ms][DEBUG] START check_boot_completed [2025-08-25 16:44:04][355320548641540][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:44:04][355320548641540][348 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:44:04][355320548641540][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:44:04][355320548641540][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:44:04][355320548641540][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 16:44:04][355320548641540][396 ms][DEBUG] START check_internet [2025-08-25 16:44:04][355320548641540][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:44:04][355320548641540][708 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.328/198.328/198.328/0.000 ms\n [2025-08-25 16:44:04][355320548641540][708 ms][DEBUG] check_internet: online [2025-08-25 16:44:04][355320548641540][708 ms][DEBUG] END check_internet in 312 ms [2025-08-25 16:44:04][355320548641540][708 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:44:04][355320548641540][708 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320548641540\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6460\"}'\'' -e'"" [2025-08-25 16:44:04][355320548641540][708 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:44:04][355320548641540][708 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320548641540\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6460\"}'\'' -e'"" [2025-08-25 16:44:08][355320548641540][4863 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5a11655-5ac5-4d59-b963-bf59d66dea2c","id":"QR_e5a11655-5ac5-4d59-b963-bf59d66dea2c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:44:09][355320548641540][5019 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 16:44:09][355320548641540][5019 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 16:44:09][355320548641540][5019 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:47:04][350603386666447][1 ms][INFO] === Request start === [2025-08-25 16:47:04][350603386666447][1 ms][DEBUG] START check_scloud [2025-08-25 16:47:04][350603386666447][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:47:05][350603386666447][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 22916 5018 25112872 229384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:47:05][350603386666447][279 ms][DEBUG] targetPkg: running [2025-08-25 16:47:05][350603386666447][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-25 16:47:05][350603386666447][279 ms][DEBUG] START check_boot_completed [2025-08-25 16:47:05][350603386666447][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:47:05][350603386666447][326 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:47:05][350603386666447][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:47:05][350603386666447][388 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:47:05][350603386666447][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:47:05][350603386666447][388 ms][DEBUG] rawBody.length=1149 [2025-08-25 16:47:05][350603386666447][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603386666447\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4034\"}'\'' -e'"" [2025-08-25 16:47:05][350603386666447][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:47:05][350603386666447][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603386666447\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4034\"}'\'' -e'"" [2025-08-25 16:47:11][350603386666447][6684 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9969c4c2-44fd-4d67-881f-da97342d754b","id":"QR_9969c4c2-44fd-4d67-881f-da97342d754b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:47:11][350603386666447][6840 ms][DEBUG] proc_open done in 6452 ms; code=255; res.len=3343 [2025-08-25 16:47:11][350603386666447][6840 ms][DEBUG] END runCmdUntilRes#1 in 6452 ms [2025-08-25 16:47:11][350603386666447][6840 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:50:03][351886692235333][1 ms][INFO] === Request start === [2025-08-25 16:50:03][351886692235333][1 ms][DEBUG] START check_scloud [2025-08-25 16:50:03][351886692235333][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:50:03][351886692235333][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 22916 5018 25271824 240704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:50:03][351886692235333][272 ms][DEBUG] targetPkg: running [2025-08-25 16:50:03][351886692235333][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-25 16:50:03][351886692235333][272 ms][DEBUG] START check_boot_completed [2025-08-25 16:50:03][351886692235333][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:50:03][351886692235333][302 ms][DEBUG] ADB: done in 30 ms; out [2025-08-25 16:50:03][351886692235333][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:50:03][351886692235333][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:50:03][351886692235333][349 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-25 16:50:03][351886692235333][349 ms][DEBUG] START check_internet [2025-08-25 16:50:03][351886692235333][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:50:04][351886692235333][771 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.632/201.632/201.632/0.000 ms\n [2025-08-25 16:50:04][351886692235333][771 ms][DEBUG] check_internet: online [2025-08-25 16:50:04][351886692235333][771 ms][DEBUG] END check_internet in 422 ms [2025-08-25 16:50:04][351886692235333][771 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:50:04][351886692235333][771 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351886692235333\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2045\"}'\'' -e'"" [2025-08-25 16:50:04][351886692235333][771 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:50:04][351886692235333][771 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351886692235333\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2045\"}'\'' -e'"" [2025-08-25 16:50:07][351886692235333][4316 ms][DEBUG] proc_open done in 3545 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 16:50:07][351886692235333][4316 ms][DEBUG] END runCmdUntilRes#1 in 3545 ms [2025-08-25 16:50:07][351886692235333][4316 ms][WARN] Detected error: Process with pid 22916 either refused to load frida-agent, or terminated during injection [2025-08-25 16:50:07][351886692235333][4317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 16:50:07][351886692235333][4442 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 16:50:07][351886692235333][4442 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 16:50:07][351886692235333][4442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:50:08][351886692235333][4567 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 16:50:08][351886692235333][4567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:50:08][351886692235333][4723 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 16:50:10][351886692235333][6738 ms][DEBUG] START check_boot_completed [2025-08-25 16:50:10][351886692235333][6738 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:50:10][351886692235333][6785 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:50:10][351886692235333][6785 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:50:10][351886692235333][6832 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:50:10][351886692235333][6832 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 16:50:13][351886692235333][9846 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 16:50:13][351886692235333][9846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351886692235333\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2045\"}'\'' -e'"" [2025-08-25 16:50:17][351886692235333][14095 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67eff361-30b1-46fa-be57-50f479c92264","id":"QR_67eff361-30b1-46fa-be57-50f479c92264","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:50:17][351886692235333][14252 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-25 16:50:17][351886692235333][14252 ms][DEBUG] END runCmdUntilRes#2 in 4405 ms [2025-08-25 16:50:17][351886692235333][14252 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:50:20][350637544373447][0 ms][INFO] === Request start === [2025-08-25 16:50:20][350637544373447][1 ms][DEBUG] START check_scloud [2025-08-25 16:50:20][350637544373447][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:50:20][350637544373447][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 24262 5018 23819420 124580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:50:20][350637544373447][305 ms][DEBUG] targetPkg: running [2025-08-25 16:50:20][350637544373447][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 16:50:20][350637544373447][305 ms][DEBUG] START check_boot_completed [2025-08-25 16:50:20][350637544373447][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:50:20][350637544373447][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:50:20][350637544373447][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:50:20][350637544373447][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:50:20][350637544373447][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:50:20][350637544373447][398 ms][DEBUG] START check_internet [2025-08-25 16:50:20][350637544373447][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:50:21][350637544373447][804 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.874/153.874/153.874/0.000 ms\n [2025-08-25 16:50:21][350637544373447][804 ms][DEBUG] check_internet: online [2025-08-25 16:50:21][350637544373447][804 ms][DEBUG] END check_internet in 406 ms [2025-08-25 16:50:21][350637544373447][805 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:50:21][350637544373447][805 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544373447\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7021\"}'\'' -e'"" [2025-08-25 16:50:21][350637544373447][805 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:50:21][350637544373447][805 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544373447\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7021\"}'\'' -e'"" [2025-08-25 16:50:24][350637544373447][4491 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15128d9d-791f-4c84-b89b-229e582c84d1","id":"QR_15128d9d-791f-4c84-b89b-229e582c84d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:50:24][350637544373447][4647 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-25 16:50:24][350637544373447][4647 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-25 16:50:24][350637544373447][4647 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:51:03][352397456633407][0 ms][INFO] === Request start === [2025-08-25 16:51:03][352397456633407][1 ms][DEBUG] START check_scloud [2025-08-25 16:51:03][352397456633407][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:51:03][352397456633407][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 24262 5018 23938096 137984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:51:03][352397456633407][311 ms][DEBUG] targetPkg: running [2025-08-25 16:51:03][352397456633407][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 16:51:03][352397456633407][311 ms][DEBUG] START check_boot_completed [2025-08-25 16:51:03][352397456633407][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:51:03][352397456633407][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:51:03][352397456633407][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:51:03][352397456633407][405 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 16:51:03][352397456633407][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 16:51:03][352397456633407][405 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:51:03][352397456633407][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456633407\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3957\"}'\'' -e'"" [2025-08-25 16:51:03][352397456633407][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:51:03][352397456633407][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456633407\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3957\"}'\'' -e'"" [2025-08-25 16:51:08][352397456633407][4466 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70b89672-c532-473a-ab6c-9ce96e388937","id":"QR_70b89672-c532-473a-ab6c-9ce96e388937","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:51:08][352397456633407][4623 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-25 16:51:08][352397456633407][4623 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-25 16:51:08][352397456633407][4623 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:51:10][352221804790968][0 ms][INFO] === Request start === [2025-08-25 16:51:10][352221804790968][1 ms][DEBUG] START check_scloud [2025-08-25 16:51:10][352221804790968][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:51:11][352221804790968][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 24262 5018 24092856 149020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:51:11][352221804790968][253 ms][DEBUG] targetPkg: running [2025-08-25 16:51:11][352221804790968][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-25 16:51:11][352221804790968][253 ms][DEBUG] START check_boot_completed [2025-08-25 16:51:11][352221804790968][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:51:11][352221804790968][299 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:51:11][352221804790968][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:51:11][352221804790968][346 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:51:11][352221804790968][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:51:11][352221804790968][346 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:51:11][352221804790968][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352221804790968\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3671\"}'\'' -e'"" [2025-08-25 16:51:11][352221804790968][346 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:51:11][352221804790968][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352221804790968\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3671\"}'\'' -e'"" [2025-08-25 16:51:15][352221804790968][4174 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4650393e-930e-40e8-9976-8f0fc65f713a","id":"QR_4650393e-930e-40e8-9976-8f0fc65f713a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:51:15][352221804790968][4330 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-25 16:51:15][352221804790968][4330 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 16:51:15][352221804790968][4330 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:53:03][350013905328976][1 ms][INFO] === Request start === [2025-08-25 16:53:03][350013905328976][1 ms][DEBUG] START check_scloud [2025-08-25 16:53:03][350013905328976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:53:03][350013905328976][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 24262 5018 24162796 159116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:53:03][350013905328976][305 ms][DEBUG] targetPkg: running [2025-08-25 16:53:03][350013905328976][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 16:53:03][350013905328976][305 ms][DEBUG] START check_boot_completed [2025-08-25 16:53:03][350013905328976][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:53:03][350013905328976][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:53:03][350013905328976][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:53:03][350013905328976][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 16:53:03][350013905328976][413 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 16:53:03][350013905328976][413 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:53:03][350013905328976][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013905328976\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2034\"}'\'' -e'"" [2025-08-25 16:53:03][350013905328976][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:53:03][350013905328976][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013905328976\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2034\"}'\'' -e'"" [2025-08-25 16:53:07][350013905328976][4444 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b28f69be-7d44-4b2d-835a-b411e92f706f","id":"QR_b28f69be-7d44-4b2d-835a-b411e92f706f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:53:08][350013905328976][4600 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 16:53:08][350013905328976][4600 ms][DEBUG] END runCmdUntilRes#1 in 4187 ms [2025-08-25 16:53:08][350013905328976][4600 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:53:10][357879703108767][0 ms][INFO] === Request start === [2025-08-25 16:53:10][357879703108767][1 ms][DEBUG] START check_scloud [2025-08-25 16:53:10][357879703108767][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:53:11][357879703108767][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 24262 5018 24316652 170728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:53:11][357879703108767][324 ms][DEBUG] targetPkg: running [2025-08-25 16:53:11][357879703108767][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-25 16:53:11][357879703108767][324 ms][DEBUG] START check_boot_completed [2025-08-25 16:53:11][357879703108767][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:53:11][357879703108767][370 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:53:11][357879703108767][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:53:11][357879703108767][417 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:53:11][357879703108767][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:53:11][357879703108767][417 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:53:11][357879703108767][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879703108767\",\"model\":\"SM-N981B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2199\"}'\'' -e'"" [2025-08-25 16:53:11][357879703108767][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:53:11][357879703108767][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879703108767\",\"model\":\"SM-N981B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2199\"}'\'' -e'"" [2025-08-25 16:53:14][357879703108767][4120 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d22218c5-4ade-402f-b312-4c2e337b2b13","id":"QR_d22218c5-4ade-402f-b312-4c2e337b2b13","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:53:14][357879703108767][4276 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-25 16:53:14][357879703108767][4276 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 16:53:14][357879703108767][4276 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:53:17][352334703463213][0 ms][INFO] === Request start === [2025-08-25 16:53:17][352334703463213][1 ms][DEBUG] START check_scloud [2025-08-25 16:53:17][352334703463213][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:53:17][352334703463213][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 24262 5018 24471412 181576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:53:17][352334703463213][310 ms][DEBUG] targetPkg: running [2025-08-25 16:53:17][352334703463213][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 16:53:17][352334703463213][310 ms][DEBUG] START check_boot_completed [2025-08-25 16:53:17][352334703463213][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:53:17][352334703463213][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:53:17][352334703463213][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:53:17][352334703463213][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:53:17][352334703463213][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:53:17][352334703463213][403 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:53:17][352334703463213][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334703463213\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1446\"}'\'' -e'"" [2025-08-25 16:53:17][352334703463213][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:53:17][352334703463213][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334703463213\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1446\"}'\'' -e'"" [2025-08-25 16:53:21][352334703463213][4105 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0156ddc-aae9-4c92-bd12-6dda0e07980a","id":"QR_c0156ddc-aae9-4c92-bd12-6dda0e07980a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:53:21][352334703463213][4262 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-25 16:53:21][352334703463213][4262 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 16:53:21][352334703463213][4262 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:54:04][350513040639906][0 ms][INFO] === Request start === [2025-08-25 16:54:04][350513040639906][1 ms][DEBUG] START check_scloud [2025-08-25 16:54:04][350513040639906][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:54:04][350513040639906][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 24262 5018 24587152 185476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:54:04][350513040639906][314 ms][DEBUG] targetPkg: running [2025-08-25 16:54:04][350513040639906][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 16:54:04][350513040639906][314 ms][DEBUG] START check_boot_completed [2025-08-25 16:54:04][350513040639906][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:54:04][350513040639906][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:54:04][350513040639906][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:54:04][350513040639906][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:54:04][350513040639906][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 16:54:04][350513040639906][392 ms][DEBUG] START check_internet [2025-08-25 16:54:04][350513040639906][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:54:05][350513040639906][751 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.116/240.116/240.116/0.000 ms\n [2025-08-25 16:54:05][350513040639906][751 ms][DEBUG] check_internet: online [2025-08-25 16:54:05][350513040639906][751 ms][DEBUG] END check_internet in 359 ms [2025-08-25 16:54:05][350513040639906][751 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:54:05][350513040639906][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350513040639906\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8179\"}'\'' -e'"" [2025-08-25 16:54:05][350513040639906][751 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:54:05][350513040639906][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350513040639906\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8179\"}'\'' -e'"" [2025-08-25 16:54:09][350513040639906][4813 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_becbec19-b40a-4826-a9ec-97749709254a","id":"QR_becbec19-b40a-4826-a9ec-97749709254a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:54:09][350513040639906][4969 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-25 16:54:09][350513040639906][4969 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-25 16:54:09][350513040639906][4969 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:55:03][351978522342411][0 ms][INFO] === Request start === [2025-08-25 16:55:03][351978522342411][0 ms][DEBUG] START check_scloud [2025-08-25 16:55:03][351978522342411][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:55:04][351978522342411][296 ms][DEBUG] SU: done in 296 ms; outu0_a118 24262 5018 24744052 192824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:55:04][351978522342411][296 ms][DEBUG] targetPkg: running [2025-08-25 16:55:04][351978522342411][296 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 16:55:04][351978522342411][296 ms][DEBUG] START check_boot_completed [2025-08-25 16:55:04][351978522342411][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:55:04][351978522342411][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:55:04][351978522342411][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:55:04][351978522342411][374 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:55:04][351978522342411][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 16:55:04][351978522342411][374 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:55:04][351978522342411][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522342411\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6781\"}'\'' -e'"" [2025-08-25 16:55:04][351978522342411][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:55:04][351978522342411][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522342411\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6781\"}'\'' -e'"" [2025-08-25 16:55:08][351978522342411][4123 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1403da21-0d2b-4aa1-8c59-4922ee63fa6f","id":"QR_1403da21-0d2b-4aa1-8c59-4922ee63fa6f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:55:08][351978522342411][4279 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-25 16:55:08][351978522342411][4279 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 16:55:08][351978522342411][4279 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:56:03][350938285418361][1 ms][INFO] === Request start === [2025-08-25 16:56:03][350938285418361][1 ms][DEBUG] START check_scloud [2025-08-25 16:56:03][350938285418361][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:56:04][350938285418361][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 24262 5018 24909016 203532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:56:04][350938285418361][283 ms][DEBUG] targetPkg: running [2025-08-25 16:56:04][350938285418361][283 ms][DEBUG] END check_scloud in 281 ms [2025-08-25 16:56:04][350938285418361][283 ms][DEBUG] START check_boot_completed [2025-08-25 16:56:04][350938285418361][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:56:04][350938285418361][329 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:56:04][350938285418361][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:56:04][350938285418361][392 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 16:56:04][350938285418361][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 16:56:04][350938285418361][392 ms][DEBUG] START check_internet [2025-08-25 16:56:04][350938285418361][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 16:56:04][350938285418361][860 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.858/201.858/201.858/0.000 ms\n [2025-08-25 16:56:04][350938285418361][861 ms][DEBUG] check_internet: online [2025-08-25 16:56:04][350938285418361][861 ms][DEBUG] END check_internet in 469 ms [2025-08-25 16:56:04][350938285418361][861 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:56:04][350938285418361][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938285418361\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8920\"}'\'' -e'"" [2025-08-25 16:56:04][350938285418361][861 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:56:04][350938285418361][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938285418361\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8920\"}'\'' -e'"" [2025-08-25 16:56:08][350938285418361][4906 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_511cc1d2-04e7-40eb-9592-e30d952886ba","id":"QR_511cc1d2-04e7-40eb-9592-e30d952886ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:56:08][350938285418361][5062 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-25 16:56:08][350938285418361][5062 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-25 16:56:08][350938285418361][5063 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:59:03][356513702255136][1 ms][INFO] === Request start === [2025-08-25 16:59:03][356513702255136][1 ms][DEBUG] START check_scloud [2025-08-25 16:59:03][356513702255136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:59:03][356513702255136][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 24262 5018 25044924 202352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:59:03][356513702255136][314 ms][DEBUG] targetPkg: running [2025-08-25 16:59:03][356513702255136][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 16:59:03][356513702255136][314 ms][DEBUG] START check_boot_completed [2025-08-25 16:59:03][356513702255136][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:59:03][356513702255136][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 16:59:03][356513702255136][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:59:03][356513702255136][394 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 16:59:03][356513702255136][394 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-25 16:59:03][356513702255136][394 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:59:03][356513702255136][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513702255136\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8262\"}'\'' -e'"" [2025-08-25 16:59:03][356513702255136][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:59:03][356513702255136][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513702255136\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8262\"}'\'' -e'"" [2025-08-25 16:59:07][356513702255136][4751 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb860c6a-d43c-4f1d-b3f8-8500bc697bf2","id":"QR_eb860c6a-d43c-4f1d-b3f8-8500bc697bf2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 16:59:08][356513702255136][4907 ms][DEBUG] proc_open done in 4512 ms; code=255; res.len=3343 [2025-08-25 16:59:08][356513702255136][4907 ms][DEBUG] END runCmdUntilRes#1 in 4513 ms [2025-08-25 16:59:08][356513702255136][4907 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 16:59:10][351978523224741][0 ms][INFO] === Request start === [2025-08-25 16:59:10][351978523224741][1 ms][DEBUG] START check_scloud [2025-08-25 16:59:10][351978523224741][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 16:59:10][351978523224741][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 24262 5018 25199812 213232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 16:59:10][351978523224741][307 ms][DEBUG] targetPkg: running [2025-08-25 16:59:10][351978523224741][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 16:59:10][351978523224741][307 ms][DEBUG] START check_boot_completed [2025-08-25 16:59:10][351978523224741][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:59:10][351978523224741][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 16:59:10][351978523224741][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:59:10][351978523224741][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 16:59:10][351978523224741][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 16:59:10][351978523224741][401 ms][DEBUG] rawBody.length=1148 [2025-08-25 16:59:10][351978523224741][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523224741\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6051\"}'\'' -e'"" [2025-08-25 16:59:10][351978523224741][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 16:59:10][351978523224741][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523224741\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6051\"}'\'' -e'"" [2025-08-25 16:59:19][351978523224741][8618 ms][DEBUG] proc_open done in 8217 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 16:59:19][351978523224741][8618 ms][DEBUG] END runCmdUntilRes#1 in 8217 ms [2025-08-25 16:59:19][351978523224741][8618 ms][WARN] Detected error: Process with pid 24262 either refused to load frida-agent, or terminated during injection [2025-08-25 16:59:19][351978523224741][8618 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 16:59:19][351978523224741][8790 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 16:59:19][351978523224741][8790 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 16:59:19][351978523224741][8790 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 16:59:19][351978523224741][8963 ms][DEBUG] SU: done in 174 ms; out [2025-08-25 16:59:19][351978523224741][8964 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 16:59:20][351978523224741][9430 ms][DEBUG] SU: done in 466 ms; out [2025-08-25 16:59:22][351978523224741][11445 ms][DEBUG] START check_boot_completed [2025-08-25 16:59:22][351978523224741][11445 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 16:59:22][351978523224741][11492 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 16:59:22][351978523224741][11492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 16:59:22][351978523224741][11555 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 16:59:22][351978523224741][11555 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 16:59:25][351978523224741][14569 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 16:59:25][351978523224741][14570 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523224741\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6051\"}'\'' -e'"" [2025-08-25 16:59:26][351978523224741][15991 ms][DEBUG] proc_open done in 1422 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-25 16:59:26][351978523224741][15991 ms][DEBUG] END runCmdUntilRes#2 in 1422 ms [2025-08-25 16:59:26][351978523224741][15991 ms][WARN] Detected error 2; Reboot the device [2025-08-25 16:59:26][351978523224741][15991 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 16:59:27][351978523224741][16631 ms][DEBUG] SU: done in 640 ms; out [2025-08-25 17:00:05][351978523224741][1 ms][INFO] === Request start === [2025-08-25 17:00:05][351978523224741][1 ms][DEBUG] START check_scloud [2025-08-25 17:00:05][351978523224741][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:00:05][351978523224741][37 ms][DEBUG] SU: done in 36 ms; out [2025-08-25 17:00:05][351978523224741][37 ms][WARN] targetPkg: not running, restarting [2025-08-25 17:00:05][351978523224741][37 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 17:00:05][351978523224741][68 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 17:00:05][351978523224741][68 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 17:00:05][351978523224741][99 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 17:00:07][351978523224741][2114 ms][DEBUG] END check_scloud in 2113 ms [2025-08-25 17:00:07][351978523224741][2115 ms][DEBUG] START check_boot_completed [2025-08-25 17:00:07][351978523224741][2115 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:00:27][351978523224741][22457 ms][DEBUG] ADB: done in 20342 ms; out [2025-08-25 17:00:27][351978523224741][22457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:00:27][351978523224741][22520 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:00:27][351978523224741][22520 ms][DEBUG] END check_boot_completed in 20405 ms [2025-08-25 17:00:27][351978523224741][22520 ms][DEBUG] START check_internet [2025-08-25 17:00:27][351978523224741][22520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:00:28][351978523224741][22769 ms][DEBUG] SU: done in 250 ms; out [2025-08-25 17:00:28][351978523224741][22770 ms][WARN] check_internet: offline [2025-08-25 17:00:28][351978523224741][22770 ms][DEBUG] END check_internet in 250 ms [2025-08-25 17:00:33][353096463133414][0 ms][INFO] === Request start === [2025-08-25 17:00:33][353096463133414][1 ms][DEBUG] START check_scloud [2025-08-25 17:00:33][353096463133414][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:00:33][353096463133414][305 ms][DEBUG] SU: done in 304 ms; out [2025-08-25 17:00:33][353096463133414][305 ms][WARN] targetPkg: not running, restarting [2025-08-25 17:00:33][353096463133414][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 17:00:33][353096463133414][445 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 17:00:33][353096463133414][445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 17:00:33][353096463133414][601 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 17:00:35][353096463133414][2617 ms][DEBUG] END check_scloud in 2616 ms [2025-08-25 17:00:35][353096463133414][2617 ms][DEBUG] START check_boot_completed [2025-08-25 17:00:35][353096463133414][2617 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:00:35][353096463133414][2663 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:00:35][353096463133414][2664 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:00:35][353096463133414][2757 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 17:00:35][353096463133414][2757 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 17:00:35][353096463133414][2757 ms][DEBUG] START check_internet [2025-08-25 17:00:35][353096463133414][2758 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:00:36][353096463133414][3273 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=125 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 125.791/125.791/125.791/0.000 ms\n [2025-08-25 17:00:36][353096463133414][3273 ms][DEBUG] check_internet: online [2025-08-25 17:00:36][353096463133414][3273 ms][DEBUG] END check_internet in 515 ms [2025-08-25 17:00:36][353096463133414][3273 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:00:36][353096463133414][3273 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353096463133414\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1723\"}'\'' -e'"" [2025-08-25 17:00:36][353096463133414][3273 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:00:36][353096463133414][3273 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353096463133414\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1723\"}'\'' -e'"" [2025-08-25 17:00:42][353096463133414][9115 ms][DEBUG] proc_open done in 5842 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-25 17:00:42][353096463133414][9115 ms][DEBUG] END runCmdUntilRes#1 in 5842 ms [2025-08-25 17:00:42][353096463133414][9115 ms][WARN] Detected error: Process not found [2025-08-25 17:00:42][353096463133414][9115 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 17:00:42][353096463133414][9303 ms][DEBUG] SU: done in 188 ms; out [2025-08-25 17:00:42][353096463133414][9304 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 17:00:42][353096463133414][9304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 17:00:42][353096463133414][9678 ms][DEBUG] SU: done in 374 ms; out [2025-08-25 17:00:42][353096463133414][9678 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 17:00:43][353096463133414][10193 ms][DEBUG] SU: done in 515 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 17:00:45][353096463133414][12208 ms][DEBUG] START check_boot_completed [2025-08-25 17:00:45][353096463133414][12208 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:00:45][353096463133414][12255 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:00:45][353096463133414][12255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:00:45][353096463133414][12380 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 17:00:45][353096463133414][12380 ms][DEBUG] END check_boot_completed in 172 ms [2025-08-25 17:00:48][353096463133414][15395 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 17:00:48][353096463133414][15395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353096463133414\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1723\"}'\'' -e'"" [2025-08-25 17:00:55][353096463133414][22034 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e584b2dc-bf39-4d08-b5c4-09259ffcef3e","id":"QR_e584b2dc-bf39-4d08-b5c4-09259ffcef3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:00:55][353096463133414][22190 ms][DEBUG] proc_open done in 6795 ms; code=255; res.len=3343 [2025-08-25 17:00:55][353096463133414][22190 ms][DEBUG] END runCmdUntilRes#2 in 6795 ms [2025-08-25 17:00:55][353096463133414][22190 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:01:03][351978523224741][0 ms][INFO] === Request start === [2025-08-25 17:01:03][351978523224741][1 ms][DEBUG] START check_scloud [2025-08-25 17:01:03][351978523224741][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:01:04][351978523224741][356 ms][DEBUG] SU: done in 355 ms; outu0_a118 8960 4968 23728392 77792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:01:04][351978523224741][356 ms][DEBUG] targetPkg: running [2025-08-25 17:01:04][351978523224741][356 ms][DEBUG] END check_scloud in 356 ms [2025-08-25 17:01:04][351978523224741][356 ms][DEBUG] START check_boot_completed [2025-08-25 17:01:04][351978523224741][356 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:01:04][351978523224741][403 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:01:04][351978523224741][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:01:04][351978523224741][465 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:01:04][351978523224741][466 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:01:04][351978523224741][466 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:01:04][351978523224741][466 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523224741\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8028\"}'\'' -e'"" [2025-08-25 17:01:04][351978523224741][466 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:01:04][351978523224741][466 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523224741\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8028\"}'\'' -e'"" [2025-08-25 17:01:09][351978523224741][5652 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6df75f8d-b8c7-43b8-8bcb-a8118606dc1e","id":"QR_6df75f8d-b8c7-43b8-8bcb-a8118606dc1e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:01:09][351978523224741][5808 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-08-25 17:01:09][351978523224741][5808 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-08-25 17:01:09][351978523224741][5808 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:01:12][353129154288203][0 ms][INFO] === Request start === [2025-08-25 17:01:12][353129154288203][1 ms][DEBUG] START check_scloud [2025-08-25 17:01:12][353129154288203][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:01:12][353129154288203][384 ms][DEBUG] SU: done in 383 ms; outu0_a118 8960 4968 23837996 91424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:01:12][353129154288203][384 ms][DEBUG] targetPkg: running [2025-08-25 17:01:12][353129154288203][384 ms][DEBUG] END check_scloud in 383 ms [2025-08-25 17:01:12][353129154288203][384 ms][DEBUG] START check_boot_completed [2025-08-25 17:01:12][353129154288203][384 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:01:13][353129154288203][429 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 17:01:13][353129154288203][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:01:13][353129154288203][492 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 17:01:13][353129154288203][492 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 17:01:13][353129154288203][492 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:01:13][353129154288203][492 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353129154288203\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1275\"}'\'' -e'"" [2025-08-25 17:01:13][353129154288203][492 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:01:13][353129154288203][492 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353129154288203\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1275\"}'\'' -e'"" [2025-08-25 17:01:18][353129154288203][5444 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c095ebc-3269-4855-a0f4-482392a765b1","id":"QR_6c095ebc-3269-4855-a0f4-482392a765b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:01:18][353129154288203][5600 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-25 17:01:18][353129154288203][5600 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-25 17:01:18][353129154288203][5600 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:01:20][357967976769405][0 ms][INFO] === Request start === [2025-08-25 17:01:20][357967976769405][1 ms][DEBUG] START check_scloud [2025-08-25 17:01:20][357967976769405][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:01:21][357967976769405][300 ms][DEBUG] SU: done in 300 ms; outu0_a118 8960 4968 23906308 80616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:01:21][357967976769405][301 ms][DEBUG] targetPkg: running [2025-08-25 17:01:21][357967976769405][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-25 17:01:21][357967976769405][301 ms][DEBUG] START check_boot_completed [2025-08-25 17:01:21][357967976769405][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:01:21][357967976769405][345 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 17:01:21][357967976769405][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:01:21][357967976769405][408 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 17:01:21][357967976769405][408 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-25 17:01:21][357967976769405][408 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:01:21][357967976769405][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976769405\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6270\"}'\'' -e'"" [2025-08-25 17:01:21][357967976769405][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:01:21][357967976769405][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976769405\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6270\"}'\'' -e'"" [2025-08-25 17:01:26][357967976769405][5532 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da9aa081-3a9f-4ae7-8c13-b8cf5e7b7811","id":"QR_da9aa081-3a9f-4ae7-8c13-b8cf5e7b7811","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:01:26][357967976769405][5688 ms][DEBUG] proc_open done in 5279 ms; code=255; res.len=3343 [2025-08-25 17:01:26][357967976769405][5688 ms][DEBUG] END runCmdUntilRes#1 in 5279 ms [2025-08-25 17:01:26][357967976769405][5688 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:01:28][359184982369331][0 ms][INFO] === Request start === [2025-08-25 17:01:28][359184982369331][0 ms][DEBUG] START check_scloud [2025-08-25 17:01:28][359184982369331][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:01:28][359184982369331][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 8960 4968 24015072 84340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:01:28][359184982369331][309 ms][DEBUG] targetPkg: running [2025-08-25 17:01:28][359184982369331][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 17:01:28][359184982369331][309 ms][DEBUG] START check_boot_completed [2025-08-25 17:01:28][359184982369331][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:01:28][359184982369331][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:01:28][359184982369331][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:01:28][359184982369331][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:01:28][359184982369331][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:01:28][359184982369331][403 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:01:28][359184982369331][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359184982369331\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5537\"}'\'' -e'"" [2025-08-25 17:01:28][359184982369331][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:01:28][359184982369331][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359184982369331\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5537\"}'\'' -e'"" [2025-08-25 17:01:32][359184982369331][4730 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:01:32][359184982369331][4886 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=107 [2025-08-25 17:01:32][359184982369331][4886 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-25 17:01:32][359184982369331][4886 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:01:33][][0 ms][INFO] === Request start === [2025-08-25 17:01:33][][1 ms][DEBUG] START check_scloud [2025-08-25 17:01:33][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:01:33][][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 8960 4968 24149288 91760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:01:33][][295 ms][DEBUG] targetPkg: running [2025-08-25 17:01:33][][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-25 17:01:33][][295 ms][DEBUG] START check_boot_completed [2025-08-25 17:01:33][][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:01:33][][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:01:33][][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:01:33][][404 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 17:01:33][][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:01:33][][404 ms][DEBUG] rawBody.length=1129 [2025-08-25 17:01:33][][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T3002J1N\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7736\"}'\'' -e'"" [2025-08-25 17:01:33][][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:01:33][][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T3002J1N\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7736\"}'\'' -e'"" [2025-08-25 17:01:37][][4262 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:01:37][][4418 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=107 [2025-08-25 17:01:37][][4418 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-25 17:01:37][][4419 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:02:04][350962375709687][0 ms][INFO] === Request start === [2025-08-25 17:02:04][350962375709687][1 ms][DEBUG] START check_scloud [2025-08-25 17:02:04][350962375709687][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:02:05][350962375709687][366 ms][DEBUG] SU: done in 365 ms; outu0_a118 8960 4968 24258848 78024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:02:05][350962375709687][366 ms][DEBUG] targetPkg: running [2025-08-25 17:02:05][350962375709687][366 ms][DEBUG] END check_scloud in 366 ms [2025-08-25 17:02:05][350962375709687][366 ms][DEBUG] START check_boot_completed [2025-08-25 17:02:05][350962375709687][366 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:02:05][350962375709687][413 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:02:05][350962375709687][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:02:05][350962375709687][476 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:02:05][350962375709687][476 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:02:05][350962375709687][476 ms][DEBUG] START check_internet [2025-08-25 17:02:05][350962375709687][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:02:05][350962375709687][866 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.539/253.539/253.539/0.000 ms\n [2025-08-25 17:02:05][350962375709687][866 ms][DEBUG] check_internet: online [2025-08-25 17:02:05][350962375709687][866 ms][DEBUG] END check_internet in 391 ms [2025-08-25 17:02:05][350962375709687][866 ms][DEBUG] rawBody.length=1158 [2025-08-25 17:02:05][350962375709687][866 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962375709687\",\"model\":\"SM-X700\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T6008J5Z\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8340\"}'\'' -e'"" [2025-08-25 17:02:05][350962375709687][866 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:02:05][350962375709687][866 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962375709687\",\"model\":\"SM-X700\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T6008J5Z\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8340\"}'\'' -e'"" [2025-08-25 17:02:10][350962375709687][5787 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f9d3e27-0205-4c61-8e61-4ec0b1990416","id":"QR_2f9d3e27-0205-4c61-8e61-4ec0b1990416","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:02:10][350962375709687][5943 ms][DEBUG] proc_open done in 5076 ms; code=255; res.len=3343 [2025-08-25 17:02:10][350962375709687][5943 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-08-25 17:02:10][350962375709687][5943 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:02:13][350250291105192][1 ms][INFO] === Request start === [2025-08-25 17:02:13][350250291105192][1 ms][DEBUG] START check_scloud [2025-08-25 17:02:13][350250291105192][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:02:13][350250291105192][337 ms][DEBUG] SU: done in 336 ms; outu0_a118 8960 4968 24403496 88788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:02:13][350250291105192][337 ms][DEBUG] targetPkg: running [2025-08-25 17:02:13][350250291105192][337 ms][DEBUG] END check_scloud in 336 ms [2025-08-25 17:02:13][350250291105192][337 ms][DEBUG] START check_boot_completed [2025-08-25 17:02:13][350250291105192][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:02:13][350250291105192][384 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:02:13][350250291105192][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:02:14][350250291105192][477 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 17:02:14][350250291105192][478 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 17:02:14][350250291105192][478 ms][DEBUG] START check_internet [2025-08-25 17:02:14][350250291105192][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:02:14][350250291105192][759 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.277/171.277/171.277/0.000 ms\n [2025-08-25 17:02:14][350250291105192][759 ms][DEBUG] check_internet: online [2025-08-25 17:02:14][350250291105192][759 ms][DEBUG] END check_internet in 281 ms [2025-08-25 17:02:14][350250291105192][759 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:02:14][350250291105192][759 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250291105192\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3840\"}'\'' -e'"" [2025-08-25 17:02:14][350250291105192][759 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:02:14][350250291105192][760 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250291105192\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3840\"}'\'' -e'"" [2025-08-25 17:02:18][350250291105192][4789 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0bcee89-7f76-46de-8ea5-42a8f446a6ec","id":"QR_a0bcee89-7f76-46de-8ea5-42a8f446a6ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:02:18][350250291105192][4945 ms][DEBUG] proc_open done in 4185 ms; code=255; res.len=3343 [2025-08-25 17:02:18][350250291105192][4945 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 17:02:18][350250291105192][4945 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:04:04][356630263589560][1 ms][INFO] === Request start === [2025-08-25 17:04:04][356630263589560][1 ms][DEBUG] START check_scloud [2025-08-25 17:04:04][356630263589560][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:04:04][356630263589560][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 8960 4968 24501916 105120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:04:04][356630263589560][271 ms][DEBUG] targetPkg: running [2025-08-25 17:04:04][356630263589560][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-25 17:04:04][356630263589560][271 ms][DEBUG] START check_boot_completed [2025-08-25 17:04:04][356630263589560][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:04:04][356630263589560][318 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:04:04][356630263589560][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:04:04][356630263589560][380 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:04:04][356630263589560][380 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:04:04][356630263589560][380 ms][DEBUG] START check_internet [2025-08-25 17:04:04][356630263589560][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:04:05][356630263589560][740 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.225/259.225/259.225/0.000 ms\n [2025-08-25 17:04:05][356630263589560][740 ms][DEBUG] check_internet: online [2025-08-25 17:04:05][356630263589560][740 ms][DEBUG] END check_internet in 360 ms [2025-08-25 17:04:05][356630263589560][740 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:04:05][356630263589560][740 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356630263589560\",\"model\":\"SM-F741U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7325\"}'\'' -e'"" [2025-08-25 17:04:05][356630263589560][740 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:04:05][356630263589560][740 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356630263589560\",\"model\":\"SM-F741U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7325\"}'\'' -e'"" [2025-08-25 17:04:10][356630263589560][5785 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbf7f403-49a8-405b-92a6-bef887f9316f","id":"QR_cbf7f403-49a8-405b-92a6-bef887f9316f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:04:10][356630263589560][5941 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-25 17:04:10][356630263589560][5941 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-25 17:04:10][356630263589560][5941 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:05:03][353744503441186][0 ms][INFO] === Request start === [2025-08-25 17:05:03][353744503441186][1 ms][DEBUG] START check_scloud [2025-08-25 17:05:03][353744503441186][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:05:03][353744503441186][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 8960 4968 24654656 115228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:05:03][353744503441186][262 ms][DEBUG] targetPkg: running [2025-08-25 17:05:03][353744503441186][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-25 17:05:03][353744503441186][262 ms][DEBUG] START check_boot_completed [2025-08-25 17:05:03][353744503441186][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:05:03][353744503441186][308 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:05:03][353744503441186][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:05:03][353744503441186][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:05:03][353744503441186][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:05:03][353744503441186][355 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:05:03][353744503441186][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353744503441186\",\"model\":\"SM-E225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5939\"}'\'' -e'"" [2025-08-25 17:05:03][353744503441186][355 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:05:03][353744503441186][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353744503441186\",\"model\":\"SM-E225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5939\"}'\'' -e'"" [2025-08-25 17:05:07][353744503441186][4510 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d25d962-a58d-42f3-92a3-1c59c7028fb8","id":"QR_2d25d962-a58d-42f3-92a3-1c59c7028fb8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:05:08][353744503441186][4666 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-25 17:05:08][353744503441186][4666 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 17:05:08][353744503441186][4666 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:07:03][355859835968470][1 ms][INFO] === Request start === [2025-08-25 17:07:03][355859835968470][1 ms][DEBUG] START check_scloud [2025-08-25 17:07:03][355859835968470][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:07:03][355859835968470][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 8960 4968 24795044 120604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:07:03][355859835968470][300 ms][DEBUG] targetPkg: running [2025-08-25 17:07:03][355859835968470][300 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 17:07:03][355859835968470][300 ms][DEBUG] START check_boot_completed [2025-08-25 17:07:03][355859835968470][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:07:03][355859835968470][345 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 17:07:03][355859835968470][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:07:03][355859835968470][438 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 17:07:03][355859835968470][439 ms][DEBUG] END check_boot_completed in 139 ms [2025-08-25 17:07:03][355859835968470][439 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:07:03][355859835968470][439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859835968470\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9668\"}'\'' -e'"" [2025-08-25 17:07:03][355859835968470][439 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:07:03][355859835968470][439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859835968470\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9668\"}'\'' -e'"" [2025-08-25 17:07:07][355859835968470][4687 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1fb38d4-6a83-4159-854d-72fe7e1a6d93","id":"QR_a1fb38d4-6a83-4159-854d-72fe7e1a6d93","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:07:08][355859835968470][4843 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3343 [2025-08-25 17:07:08][355859835968470][4843 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-25 17:07:08][355859835968470][4843 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:07:11][351406759113594][0 ms][INFO] === Request start === [2025-08-25 17:07:11][351406759113594][1 ms][DEBUG] START check_scloud [2025-08-25 17:07:11][351406759113594][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:07:12][351406759113594][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 8960 4968 24966316 128544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:07:12][351406759113594][312 ms][DEBUG] targetPkg: running [2025-08-25 17:07:12][351406759113594][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 17:07:12][351406759113594][312 ms][DEBUG] START check_boot_completed [2025-08-25 17:07:12][351406759113594][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:07:12][351406759113594][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:07:12][351406759113594][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:07:12][351406759113594][407 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 17:07:12][351406759113594][407 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 17:07:12][351406759113594][407 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:07:12][351406759113594][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351406759113594\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1087\"}'\'' -e'"" [2025-08-25 17:07:12][351406759113594][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:07:12][351406759113594][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351406759113594\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1087\"}'\'' -e'"" [2025-08-25 17:07:16][351406759113594][4889 ms][DEBUG] proc_open done in 4481 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 17:07:16][351406759113594][4889 ms][DEBUG] END runCmdUntilRes#1 in 4482 ms [2025-08-25 17:07:16][351406759113594][4889 ms][WARN] Detected error: Process with pid 8960 either refused to load frida-agent, or terminated during injection [2025-08-25 17:07:16][351406759113594][4889 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 17:07:16][351406759113594][5045 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 17:07:16][351406759113594][5045 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 17:07:16][351406759113594][5045 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 17:07:17][351406759113594][5185 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 17:07:17][351406759113594][5185 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 17:07:17][351406759113594][5343 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 17:07:19][351406759113594][7356 ms][DEBUG] START check_boot_completed [2025-08-25 17:07:19][351406759113594][7357 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:07:19][351406759113594][7404 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:07:19][351406759113594][7404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:07:19][351406759113594][7466 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:07:19][351406759113594][7466 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 17:07:22][351406759113594][10481 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 17:07:22][351406759113594][10481 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351406759113594\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1087\"}'\'' -e'"" [2025-08-25 17:07:29][351406759113594][18120 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d15495f5-7131-4500-a58b-a19347af73d6","id":"QR_d15495f5-7131-4500-a58b-a19347af73d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:07:30][351406759113594][18276 ms][DEBUG] proc_open done in 7795 ms; code=255; res.len=3343 [2025-08-25 17:07:30][351406759113594][18276 ms][DEBUG] END runCmdUntilRes#2 in 7795 ms [2025-08-25 17:07:30][351406759113594][18276 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:09:03][352731456969579][0 ms][INFO] === Request start === [2025-08-25 17:09:03][352731456969579][1 ms][DEBUG] START check_scloud [2025-08-25 17:09:03][352731456969579][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:09:04][352731456969579][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 19256 4968 23653396 127488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:09:04][352731456969579][314 ms][DEBUG] targetPkg: running [2025-08-25 17:09:04][352731456969579][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 17:09:04][352731456969579][314 ms][DEBUG] START check_boot_completed [2025-08-25 17:09:04][352731456969579][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:09:04][352731456969579][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:09:04][352731456969579][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:09:04][352731456969579][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:09:04][352731456969579][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:09:04][352731456969579][392 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:09:04][352731456969579][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731456969579\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2829\"}'\'' -e'"" [2025-08-25 17:09:04][352731456969579][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:09:04][352731456969579][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731456969579\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2829\"}'\'' -e'"" [2025-08-25 17:09:08][352731456969579][4812 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78bd034e-4871-4627-b477-b9141eb36e2f","id":"QR_78bd034e-4871-4627-b477-b9141eb36e2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:09:08][352731456969579][4968 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-08-25 17:09:08][352731456969579][4968 ms][DEBUG] END runCmdUntilRes#1 in 4576 ms [2025-08-25 17:09:08][352731456969579][4968 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:09:11][350247873124773][0 ms][INFO] === Request start === [2025-08-25 17:09:11][350247873124773][0 ms][DEBUG] START check_scloud [2025-08-25 17:09:11][350247873124773][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:09:11][350247873124773][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 19256 4968 23777308 138160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:09:11][350247873124773][298 ms][DEBUG] targetPkg: running [2025-08-25 17:09:11][350247873124773][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 17:09:11][350247873124773][298 ms][DEBUG] START check_boot_completed [2025-08-25 17:09:11][350247873124773][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:09:11][350247873124773][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:09:11][350247873124773][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:09:11][350247873124773][392 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 17:09:11][350247873124773][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:09:11][350247873124773][392 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:09:11][350247873124773][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247873124773\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6434\"}'\'' -e'"" [2025-08-25 17:09:11][350247873124773][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:09:11][350247873124773][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247873124773\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6434\"}'\'' -e'"" [2025-08-25 17:09:15][350247873124773][4405 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_281e239f-1d8f-442c-8ad1-4cffe81ec22a","id":"QR_281e239f-1d8f-442c-8ad1-4cffe81ec22a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:09:15][350247873124773][4561 ms][DEBUG] proc_open done in 4169 ms; code=255; res.len=3343 [2025-08-25 17:09:15][350247873124773][4562 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-25 17:09:15][350247873124773][4562 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:11:30][353154433615711][1 ms][INFO] === Request start === [2025-08-25 17:11:30][353154433615711][1 ms][DEBUG] START check_scloud [2025-08-25 17:11:30][353154433615711][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:11:30][353154433615711][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 19256 4968 23897260 150172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:11:30][353154433615711][254 ms][DEBUG] targetPkg: running [2025-08-25 17:11:30][353154433615711][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-25 17:11:30][353154433615711][254 ms][DEBUG] START check_boot_completed [2025-08-25 17:11:30][353154433615711][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:11:30][353154433615711][286 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:11:30][353154433615711][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:11:30][353154433615711][333 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:11:30][353154433615711][333 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:11:30][353154433615711][333 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:11:30][353154433615711][333 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433615711\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1303\"}'\'' -e'"" [2025-08-25 17:11:30][353154433615711][333 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:11:30][353154433615711][333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433615711\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1303\"}'\'' -e'"" [2025-08-25 17:11:34][353154433615711][4128 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:11:34][353154433615711][4285 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=107 [2025-08-25 17:11:34][353154433615711][4285 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-25 17:11:34][353154433615711][4285 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:11:34][][0 ms][INFO] === Request start === [2025-08-25 17:11:34][][1 ms][DEBUG] START check_scloud [2025-08-25 17:11:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:11:34][][248 ms][DEBUG] SU: done in 248 ms; outu0_a118 19256 4968 24081652 161192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:11:34][][248 ms][DEBUG] targetPkg: running [2025-08-25 17:11:34][][248 ms][DEBUG] END check_scloud in 248 ms [2025-08-25 17:11:34][][248 ms][DEBUG] START check_boot_completed [2025-08-25 17:11:34][][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:11:34][][280 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:11:34][][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:11:35][][326 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:11:35][][326 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:11:35][][326 ms][DEBUG] rawBody.length=1129 [2025-08-25 17:11:35][][326 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXC0SKJ6T\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3176\"}'\'' -e'"" [2025-08-25 17:11:35][][326 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:11:35][][327 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXC0SKJ6T\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3176\"}'\'' -e'"" [2025-08-25 17:11:38][][3935 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:11:38][][4091 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=107 [2025-08-25 17:11:38][][4091 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-08-25 17:11:38][][4091 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:11:41][353154433615711][0 ms][INFO] === Request start === [2025-08-25 17:11:41][353154433615711][1 ms][DEBUG] START check_scloud [2025-08-25 17:11:41][353154433615711][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:11:41][353154433615711][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 19256 4968 24201724 173052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:11:41][353154433615711][306 ms][DEBUG] targetPkg: running [2025-08-25 17:11:41][353154433615711][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 17:11:41][353154433615711][306 ms][DEBUG] START check_boot_completed [2025-08-25 17:11:41][353154433615711][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:11:41][353154433615711][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:11:41][353154433615711][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:11:41][353154433615711][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:11:41][353154433615711][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:11:41][353154433615711][399 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:11:41][353154433615711][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433615711\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5610\"}'\'' -e'"" [2025-08-25 17:11:41][353154433615711][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:11:41][353154433615711][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433615711\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5610\"}'\'' -e'"" [2025-08-25 17:11:46][353154433615711][5429 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b28d0ac9-2223-449e-8682-869f67612dfa","id":"QR_b28d0ac9-2223-449e-8682-869f67612dfa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:11:46][353154433615711][5586 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-08-25 17:11:46][353154433615711][5586 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-08-25 17:11:46][353154433615711][5586 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:13:31][355170560492136][1 ms][INFO] === Request start === [2025-08-25 17:13:31][355170560492136][1 ms][DEBUG] START check_scloud [2025-08-25 17:13:31][355170560492136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:13:31][355170560492136][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 19256 4968 24333848 184548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:13:31][355170560492136][298 ms][DEBUG] targetPkg: running [2025-08-25 17:13:31][355170560492136][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 17:13:31][355170560492136][298 ms][DEBUG] START check_boot_completed [2025-08-25 17:13:31][355170560492136][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:13:31][355170560492136][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:13:31][355170560492136][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:13:31][355170560492136][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:13:31][355170560492136][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:13:31][355170560492136][407 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:13:31][355170560492136][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9226\"}'\'' -e'"" [2025-08-25 17:13:31][355170560492136][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:13:31][355170560492136][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9226\"}'\'' -e'"" [2025-08-25 17:13:36][355170560492136][5218 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-25 17:13:36][355170560492136][5374 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=101 [2025-08-25 17:13:36][355170560492136][5375 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-08-25 17:13:36][355170560492136][5375 ms][INFO] SUCCESS response from frida (len=101) [2025-08-25 17:13:37][][0 ms][INFO] === Request start === [2025-08-25 17:13:37][][1 ms][DEBUG] START check_scloud [2025-08-25 17:13:37][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:13:37][][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 19256 4968 24453792 195464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:13:37][][319 ms][DEBUG] targetPkg: running [2025-08-25 17:13:37][][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 17:13:37][][319 ms][DEBUG] START check_boot_completed [2025-08-25 17:13:37][][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:13:37][][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:13:37][][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:13:37][][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:13:37][][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:13:37][][412 ms][DEBUG] rawBody.length=1130 [2025-08-25 17:13:37][][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8313\"}'\'' -e'"" [2025-08-25 17:13:37][][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:13:37][][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8313\"}'\'' -e'"" [2025-08-25 17:13:42][][5161 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-25 17:13:42][][5317 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=101 [2025-08-25 17:13:42][][5317 ms][DEBUG] END runCmdUntilRes#1 in 4905 ms [2025-08-25 17:13:42][][5317 ms][INFO] SUCCESS response from frida (len=101) [2025-08-25 17:13:43][355170560492136][0 ms][INFO] === Request start === [2025-08-25 17:13:43][355170560492136][1 ms][DEBUG] START check_scloud [2025-08-25 17:13:43][355170560492136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:13:43][355170560492136][282 ms][DEBUG] SU: done in 282 ms; outu0_a118 19256 4968 24614824 207468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:13:43][355170560492136][282 ms][DEBUG] targetPkg: running [2025-08-25 17:13:43][355170560492136][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-25 17:13:43][355170560492136][283 ms][DEBUG] START check_boot_completed [2025-08-25 17:13:43][355170560492136][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:13:43][355170560492136][314 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:13:43][355170560492136][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:13:43][355170560492136][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:13:43][355170560492136][360 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:13:43][355170560492136][360 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:13:43][355170560492136][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6069\"}'\'' -e'"" [2025-08-25 17:13:43][355170560492136][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:13:43][355170560492136][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6069\"}'\'' -e'"" [2025-08-25 17:13:47][355170560492136][4188 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:13:47][355170560492136][4344 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=107 [2025-08-25 17:13:47][355170560492136][4344 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 17:13:47][355170560492136][4344 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:13:47][][0 ms][INFO] === Request start === [2025-08-25 17:13:47][][1 ms][DEBUG] START check_scloud [2025-08-25 17:13:47][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:13:48][][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 19256 4968 24777904 218172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:13:48][][257 ms][DEBUG] targetPkg: running [2025-08-25 17:13:48][][257 ms][DEBUG] END check_scloud in 257 ms [2025-08-25 17:13:48][][257 ms][DEBUG] START check_boot_completed [2025-08-25 17:13:48][][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:13:48][][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:13:48][][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:13:48][][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:13:48][][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:13:48][][336 ms][DEBUG] rawBody.length=1129 [2025-08-25 17:13:48][][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4648\"}'\'' -e'"" [2025-08-25 17:13:48][][336 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:13:48][][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4648\"}'\'' -e'"" [2025-08-25 17:13:51][][3819 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:13:51][][3975 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=107 [2025-08-25 17:13:51][][3975 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-25 17:13:51][][3975 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:14:04][357967978232063][0 ms][INFO] === Request start === [2025-08-25 17:14:04][357967978232063][1 ms][DEBUG] START check_scloud [2025-08-25 17:14:04][357967978232063][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:14:04][357967978232063][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 19256 4968 24889164 230260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:14:04][357967978232063][308 ms][DEBUG] targetPkg: running [2025-08-25 17:14:04][357967978232063][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 17:14:04][357967978232063][309 ms][DEBUG] START check_boot_completed [2025-08-25 17:14:04][357967978232063][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:14:04][357967978232063][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:14:04][357967978232063][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:14:04][357967978232063][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:14:04][357967978232063][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:14:04][357967978232063][417 ms][DEBUG] START check_internet [2025-08-25 17:14:04][357967978232063][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:14:04][357967978232063][856 ms][DEBUG] SU: done in 439 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.849/200.849/200.849/0.000 ms\n [2025-08-25 17:14:04][357967978232063][856 ms][DEBUG] check_internet: online [2025-08-25 17:14:04][357967978232063][856 ms][DEBUG] END check_internet in 439 ms [2025-08-25 17:14:04][357967978232063][857 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:14:04][357967978232063][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967978232063\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9640\"}'\'' -e'"" [2025-08-25 17:14:04][357967978232063][857 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:14:04][357967978232063][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967978232063\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9640\"}'\'' -e'"" [2025-08-25 17:14:08][357967978232063][4776 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e83cb20f-e308-474d-9597-67426620751b","id":"QR_e83cb20f-e308-474d-9597-67426620751b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:14:09][357967978232063][4932 ms][DEBUG] proc_open done in 4075 ms; code=255; res.len=3343 [2025-08-25 17:14:09][357967978232063][4932 ms][DEBUG] END runCmdUntilRes#1 in 4075 ms [2025-08-25 17:14:09][357967978232063][4932 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:14:11][358184576730873][0 ms][INFO] === Request start === [2025-08-25 17:14:11][358184576730873][1 ms][DEBUG] START check_scloud [2025-08-25 17:14:11][358184576730873][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:14:12][358184576730873][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 19256 4968 25019440 242312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:14:12][358184576730873][306 ms][DEBUG] targetPkg: running [2025-08-25 17:14:12][358184576730873][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 17:14:12][358184576730873][307 ms][DEBUG] START check_boot_completed [2025-08-25 17:14:12][358184576730873][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:14:12][358184576730873][352 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 17:14:12][358184576730873][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:14:12][358184576730873][400 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 17:14:12][358184576730873][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:14:12][358184576730873][400 ms][DEBUG] START check_internet [2025-08-25 17:14:12][358184576730873][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:14:12][358184576730873][634 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=130 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 130.304/130.304/130.304/0.000 ms\n [2025-08-25 17:14:12][358184576730873][634 ms][DEBUG] check_internet: online [2025-08-25 17:14:12][358184576730873][634 ms][DEBUG] END check_internet in 234 ms [2025-08-25 17:14:12][358184576730873][634 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:14:12][358184576730873][634 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184576730873\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7688\"}'\'' -e'"" [2025-08-25 17:14:12][358184576730873][634 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:14:12][358184576730873][635 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184576730873\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7688\"}'\'' -e'"" [2025-08-25 17:14:20][358184576730873][8725 ms][DEBUG] proc_open done in 8091 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 17:14:20][358184576730873][8725 ms][DEBUG] END runCmdUntilRes#1 in 8091 ms [2025-08-25 17:14:20][358184576730873][8725 ms][WARN] Detected error: Process with pid 19256 either refused to load frida-agent, or terminated during injection [2025-08-25 17:14:20][358184576730873][8726 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 17:14:20][358184576730873][9007 ms][DEBUG] SU: done in 282 ms; out [2025-08-25 17:14:20][358184576730873][9008 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 17:14:20][358184576730873][9008 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 17:14:21][358184576730873][9335 ms][DEBUG] SU: done in 327 ms; out [2025-08-25 17:14:21][358184576730873][9335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 17:14:21][358184576730873][9694 ms][DEBUG] SU: done in 359 ms; out [2025-08-25 17:14:23][358184576730873][11708 ms][DEBUG] START check_boot_completed [2025-08-25 17:14:23][358184576730873][11708 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:14:23][358184576730873][11740 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:14:23][358184576730873][11740 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:14:23][358184576730873][11787 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:14:23][358184576730873][11787 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:14:26][358184576730873][14801 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 17:14:26][358184576730873][14801 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184576730873\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7688\"}'\'' -e'"" [2025-08-25 17:14:27][358184576730873][15286 ms][DEBUG] proc_open done in 484 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-25 17:14:27][358184576730873][15286 ms][DEBUG] END runCmdUntilRes#2 in 485 ms [2025-08-25 17:14:27][358184576730873][15286 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-08-25 17:15:03][358184576730873][0 ms][INFO] === Request start === [2025-08-25 17:15:03][358184576730873][1 ms][DEBUG] START check_scloud [2025-08-25 17:15:03][358184576730873][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:15:03][358184576730873][520 ms][DEBUG] SU: done in 519 ms; out [2025-08-25 17:15:03][358184576730873][520 ms][WARN] targetPkg: not running, restarting [2025-08-25 17:15:03][358184576730873][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 17:15:04][358184576730873][739 ms][DEBUG] SU: done in 218 ms; out [2025-08-25 17:15:04][358184576730873][739 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 17:15:04][358184576730873][1067 ms][DEBUG] SU: done in 328 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 17:15:06][358184576730873][3082 ms][DEBUG] END check_scloud in 3081 ms [2025-08-25 17:15:06][358184576730873][3082 ms][DEBUG] START check_boot_completed [2025-08-25 17:15:06][358184576730873][3082 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:15:06][358184576730873][3129 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:15:06][358184576730873][3129 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:15:06][358184576730873][3223 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 17:15:06][358184576730873][3223 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 17:15:06][358184576730873][3223 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:15:06][358184576730873][3223 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184576730873\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1720\"}'\'' -e'"" [2025-08-25 17:15:06][358184576730873][3223 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:15:06][358184576730873][3223 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184576730873\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1720\"}'\'' -e'"" [2025-08-25 17:15:13][358184576730873][9643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e167de9-50be-4a76-8feb-07e49ba45e00","id":"QR_3e167de9-50be-4a76-8feb-07e49ba45e00","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:15:13][358184576730873][9799 ms][DEBUG] proc_open done in 6576 ms; code=255; res.len=3343 [2025-08-25 17:15:13][358184576730873][9799 ms][DEBUG] END runCmdUntilRes#1 in 6576 ms [2025-08-25 17:15:13][358184576730873][9799 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:18:30][351787741332024][1 ms][INFO] === Request start === [2025-08-25 17:18:30][351787741332024][1 ms][DEBUG] START check_scloud [2025-08-25 17:18:30][351787741332024][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:18:31][351787741332024][338 ms][DEBUG] SU: done in 337 ms; outu0_a118 23818 20899 23910916 64284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:18:31][351787741332024][338 ms][DEBUG] targetPkg: running [2025-08-25 17:18:31][351787741332024][338 ms][DEBUG] END check_scloud in 337 ms [2025-08-25 17:18:31][351787741332024][339 ms][DEBUG] START check_boot_completed [2025-08-25 17:18:31][351787741332024][339 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:18:31][351787741332024][385 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:18:31][351787741332024][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:18:31][351787741332024][434 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 17:18:31][351787741332024][434 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 17:18:31][351787741332024][434 ms][DEBUG] START check_internet [2025-08-25 17:18:31][351787741332024][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:18:31][351787741332024][949 ms][DEBUG] SU: done in 514 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.438/202.438/202.438/0.000 ms\n [2025-08-25 17:18:31][351787741332024][949 ms][DEBUG] check_internet: online [2025-08-25 17:18:31][351787741332024][949 ms][DEBUG] END check_internet in 515 ms [2025-08-25 17:18:31][351787741332024][949 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:18:31][351787741332024][949 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6032\"}'\'' -e'"" [2025-08-25 17:18:31][351787741332024][949 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:18:31][351787741332024][949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6032\"}'\'' -e'"" [2025-08-25 17:18:36][351787741332024][5181 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:18:36][351787741332024][5337 ms][DEBUG] proc_open done in 4387 ms; code=255; res.len=107 [2025-08-25 17:18:36][351787741332024][5337 ms][DEBUG] END runCmdUntilRes#1 in 4388 ms [2025-08-25 17:18:36][351787741332024][5337 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:18:36][][0 ms][INFO] === Request start === [2025-08-25 17:18:36][][0 ms][DEBUG] START check_scloud [2025-08-25 17:18:36][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:18:36][][248 ms][DEBUG] SU: done in 248 ms; outu0_a118 23818 20899 24090252 84624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:18:36][][248 ms][DEBUG] targetPkg: running [2025-08-25 17:18:36][][248 ms][DEBUG] END check_scloud in 248 ms [2025-08-25 17:18:36][][248 ms][DEBUG] START check_boot_completed [2025-08-25 17:18:36][][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:18:36][][279 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:18:36][][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:18:36][][326 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:18:36][][327 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:18:36][][327 ms][DEBUG] START check_internet [2025-08-25 17:18:36][][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:18:37][][608 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.276/146.276/146.276/0.000 ms\n [2025-08-25 17:18:37][][608 ms][DEBUG] check_internet: online [2025-08-25 17:18:37][][608 ms][DEBUG] END check_internet in 281 ms [2025-08-25 17:18:37][][608 ms][DEBUG] rawBody.length=1129 [2025-08-25 17:18:37][][608 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9015\"}'\'' -e'"" [2025-08-25 17:18:37][][608 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:18:37][][608 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9015\"}'\'' -e'"" [2025-08-25 17:18:41][][4419 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:18:41][][4575 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=107 [2025-08-25 17:18:41][][4575 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-25 17:18:41][][4575 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:18:43][351787741332024][0 ms][INFO] === Request start === [2025-08-25 17:18:43][351787741332024][1 ms][DEBUG] START check_scloud [2025-08-25 17:18:43][351787741332024][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:18:43][351787741332024][337 ms][DEBUG] SU: done in 336 ms; outu0_a118 23818 20899 24234516 95524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:18:43][351787741332024][337 ms][DEBUG] targetPkg: running [2025-08-25 17:18:43][351787741332024][337 ms][DEBUG] END check_scloud in 337 ms [2025-08-25 17:18:43][351787741332024][337 ms][DEBUG] START check_boot_completed [2025-08-25 17:18:43][351787741332024][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:18:43][351787741332024][384 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:18:43][351787741332024][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:18:43][351787741332024][431 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:18:43][351787741332024][431 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:18:43][351787741332024][431 ms][DEBUG] START check_internet [2025-08-25 17:18:43][351787741332024][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:18:43][351787741332024][681 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.964/138.964/138.964/0.000 ms\n [2025-08-25 17:18:43][351787741332024][681 ms][DEBUG] check_internet: online [2025-08-25 17:18:43][351787741332024][681 ms][DEBUG] END check_internet in 250 ms [2025-08-25 17:18:43][351787741332024][681 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:18:43][351787741332024][681 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4940\"}'\'' -e'"" [2025-08-25 17:18:43][351787741332024][681 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:18:43][351787741332024][681 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4940\"}'\'' -e'"" [2025-08-25 17:18:47][351787741332024][4930 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:18:48][351787741332024][5086 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=107 [2025-08-25 17:18:48][351787741332024][5086 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-25 17:18:48][351787741332024][5086 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:18:48][][0 ms][INFO] === Request start === [2025-08-25 17:18:48][][1 ms][DEBUG] START check_scloud [2025-08-25 17:18:48][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:18:48][][253 ms][DEBUG] SU: done in 253 ms; outu0_a118 23818 20899 24407772 107256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:18:48][][253 ms][DEBUG] targetPkg: running [2025-08-25 17:18:48][][253 ms][DEBUG] END check_scloud in 253 ms [2025-08-25 17:18:48][][253 ms][DEBUG] START check_boot_completed [2025-08-25 17:18:48][][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:18:48][][300 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:18:48][][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:18:48][][348 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 17:18:48][][348 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:18:48][][348 ms][DEBUG] START check_internet [2025-08-25 17:18:48][][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:18:49][][644 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=148 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 148.515/148.515/148.515/0.000 ms\n [2025-08-25 17:18:49][][644 ms][DEBUG] check_internet: online [2025-08-25 17:18:49][][644 ms][DEBUG] END check_internet in 296 ms [2025-08-25 17:18:49][][644 ms][DEBUG] rawBody.length=1130 [2025-08-25 17:18:49][][644 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5369\"}'\'' -e'"" [2025-08-25 17:18:49][][644 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:18:49][][644 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5369\"}'\'' -e'"" [2025-08-25 17:18:56][][8189 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:18:56][][8345 ms][DEBUG] proc_open done in 7701 ms; code=255; res.len=107 [2025-08-25 17:18:56][][8345 ms][DEBUG] END runCmdUntilRes#1 in 7701 ms [2025-08-25 17:18:56][][8345 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:21:04][357567918661726][1 ms][INFO] === Request start === [2025-08-25 17:21:04][357567918661726][1 ms][DEBUG] START check_scloud [2025-08-25 17:21:04][357567918661726][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:21:05][357567918661726][320 ms][DEBUG] SU: done in 318 ms; outu0_a118 23818 20899 24523604 119476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:21:05][357567918661726][320 ms][DEBUG] targetPkg: running [2025-08-25 17:21:05][357567918661726][320 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 17:21:05][357567918661726][320 ms][DEBUG] START check_boot_completed [2025-08-25 17:21:05][357567918661726][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:21:05][357567918661726][351 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:21:05][357567918661726][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:21:05][357567918661726][399 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 17:21:05][357567918661726][399 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 17:21:05][357567918661726][399 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:21:05][357567918661726][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567918661726\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6980\"}'\'' -e'"" [2025-08-25 17:21:05][357567918661726][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:21:05][357567918661726][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567918661726\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6980\"}'\'' -e'"" [2025-08-25 17:21:12][357567918661726][7412 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5c830ee-8368-4245-8541-7c13d530892d","id":"QR_a5c830ee-8368-4245-8541-7c13d530892d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:21:12][357567918661726][7568 ms][DEBUG] proc_open done in 7169 ms; code=255; res.len=3343 [2025-08-25 17:21:12][357567918661726][7568 ms][DEBUG] END runCmdUntilRes#1 in 7169 ms [2025-08-25 17:21:12][357567918661726][7568 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:21:17][352208774016821][0 ms][INFO] === Request start === [2025-08-25 17:21:17][352208774016821][1 ms][DEBUG] START check_scloud [2025-08-25 17:21:17][352208774016821][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:21:17][352208774016821][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 23818 20899 24686684 131388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:21:17][352208774016821][312 ms][DEBUG] targetPkg: running [2025-08-25 17:21:17][352208774016821][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 17:21:17][352208774016821][312 ms][DEBUG] START check_boot_completed [2025-08-25 17:21:17][352208774016821][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:21:17][352208774016821][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:21:17][352208774016821][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:21:17][352208774016821][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:21:17][352208774016821][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:21:17][352208774016821][405 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:21:17][352208774016821][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208774016821\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7024\"}'\'' -e'"" [2025-08-25 17:21:17][352208774016821][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:21:17][352208774016821][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208774016821\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7024\"}'\'' -e'"" [2025-08-25 17:21:21][352208774016821][4311 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a50bf4a-1b3a-49f0-847e-2badf2bbc5a3","id":"QR_5a50bf4a-1b3a-49f0-847e-2badf2bbc5a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:21:21][352208774016821][4467 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-25 17:21:21][352208774016821][4467 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-25 17:21:21][352208774016821][4467 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:21:25][355082183243988][0 ms][INFO] === Request start === [2025-08-25 17:21:25][355082183243988][1 ms][DEBUG] START check_scloud [2025-08-25 17:21:25][355082183243988][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:21:25][355082183243988][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 23818 20899 24808676 142248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:21:25][355082183243988][292 ms][DEBUG] targetPkg: running [2025-08-25 17:21:25][355082183243988][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-25 17:21:25][355082183243988][292 ms][DEBUG] START check_boot_completed [2025-08-25 17:21:25][355082183243988][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:21:25][355082183243988][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:21:25][355082183243988][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:21:25][355082183243988][432 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 17:21:25][355082183243988][432 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 17:21:25][355082183243988][432 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:21:25][355082183243988][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355082183243988\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3603\"}'\'' -e'"" [2025-08-25 17:21:25][355082183243988][433 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:21:25][355082183243988][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355082183243988\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3603\"}'\'' -e'"" [2025-08-25 17:21:32][355082183243988][7384 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07920c75-0b72-42e1-9452-d6656d13a395","id":"QR_07920c75-0b72-42e1-9452-d6656d13a395","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:21:32][355082183243988][7540 ms][DEBUG] proc_open done in 7107 ms; code=255; res.len=3343 [2025-08-25 17:21:32][355082183243988][7540 ms][DEBUG] END runCmdUntilRes#1 in 7107 ms [2025-08-25 17:21:32][355082183243988][7540 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:23:03][353235522989313][0 ms][INFO] === Request start === [2025-08-25 17:23:03][353235522989313][1 ms][DEBUG] START check_scloud [2025-08-25 17:23:03][353235522989313][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:23:03][353235522989313][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 23818 20899 24932736 153560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:23:03][353235522989313][287 ms][DEBUG] targetPkg: running [2025-08-25 17:23:03][353235522989313][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-25 17:23:03][353235522989313][287 ms][DEBUG] START check_boot_completed [2025-08-25 17:23:03][353235522989313][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:23:03][353235522989313][332 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 17:23:03][353235522989313][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:23:04][353235522989313][395 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 17:23:04][353235522989313][395 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 17:23:04][353235522989313][395 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:23:04][353235522989313][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235522989313\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5003\"}'\'' -e'"" [2025-08-25 17:23:04][353235522989313][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:23:04][353235522989313][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235522989313\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5003\"}'\'' -e'"" [2025-08-25 17:23:08][353235522989313][4441 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6385501a-5b88-461c-9f1c-bc3c2e1945cb","id":"QR_6385501a-5b88-461c-9f1c-bc3c2e1945cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:23:08][353235522989313][4597 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-25 17:23:08][353235522989313][4597 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-25 17:23:08][353235522989313][4597 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:25:03][352600226754241][1 ms][INFO] === Request start === [2025-08-25 17:25:03][352600226754241][1 ms][DEBUG] START check_scloud [2025-08-25 17:25:03][352600226754241][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:25:03][352600226754241][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 23818 20899 25052772 164572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:25:03][352600226754241][308 ms][DEBUG] targetPkg: running [2025-08-25 17:25:03][352600226754241][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 17:25:03][352600226754241][308 ms][DEBUG] START check_boot_completed [2025-08-25 17:25:03][352600226754241][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:25:03][352600226754241][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:25:03][352600226754241][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:25:03][352600226754241][432 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 17:25:03][352600226754241][433 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 17:25:03][352600226754241][433 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:25:03][352600226754241][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226754241\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3312\"}'\'' -e'"" [2025-08-25 17:25:03][352600226754241][433 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:25:03][352600226754241][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226754241\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3312\"}'\'' -e'"" [2025-08-25 17:25:07][352600226754241][4525 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_774af289-b8c4-46f4-afaa-e195c2f65426","id":"QR_774af289-b8c4-46f4-afaa-e195c2f65426","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:25:08][352600226754241][4681 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-25 17:25:08][352600226754241][4681 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-25 17:25:08][352600226754241][4681 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:25:10][351199555302087][0 ms][INFO] === Request start === [2025-08-25 17:25:10][351199555302087][1 ms][DEBUG] START check_scloud [2025-08-25 17:25:10][351199555302087][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:25:11][351199555302087][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 23818 20899 25198444 176408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:25:11][351199555302087][317 ms][DEBUG] targetPkg: running [2025-08-25 17:25:11][351199555302087][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 17:25:11][351199555302087][317 ms][DEBUG] START check_boot_completed [2025-08-25 17:25:11][351199555302087][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:25:11][351199555302087][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:25:11][351199555302087][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:25:11][351199555302087][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:25:11][351199555302087][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:25:11][351199555302087][427 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:25:11][351199555302087][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199555302087\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6826\"}'\'' -e'"" [2025-08-25 17:25:11][351199555302087][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:25:11][351199555302087][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199555302087\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6826\"}'\'' -e'"" [2025-08-25 17:25:14][351199555302087][4144 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b05bca8-eb1e-446a-b8a6-161a68865989","id":"QR_8b05bca8-eb1e-446a-b8a6-161a68865989","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:25:15][351199555302087][4300 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-25 17:25:15][351199555302087][4300 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-25 17:25:15][351199555302087][4300 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:27:04][356954844272375][1 ms][INFO] === Request start === [2025-08-25 17:27:04][356954844272375][1 ms][DEBUG] START check_scloud [2025-08-25 17:27:04][356954844272375][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:27:05][356954844272375][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 23818 20899 25300016 187804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:27:05][356954844272375][307 ms][DEBUG] targetPkg: running [2025-08-25 17:27:05][356954844272375][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 17:27:05][356954844272375][307 ms][DEBUG] START check_boot_completed [2025-08-25 17:27:05][356954844272375][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:27:05][356954844272375][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:27:05][356954844272375][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:27:05][356954844272375][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:27:05][356954844272375][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:27:05][356954844272375][416 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:27:05][356954844272375][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356954844272375\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"SAM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9504\"}'\'' -e'"" [2025-08-25 17:27:05][356954844272375][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:27:05][356954844272375][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356954844272375\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"SAM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9504\"}'\'' -e'"" [2025-08-25 17:27:09][356954844272375][4649 ms][DEBUG] proc_open done in 4233 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 17:27:09][356954844272375][4649 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-25 17:27:09][356954844272375][4649 ms][WARN] Detected error: Process with pid 23818 either refused to load frida-agent, or terminated during injection [2025-08-25 17:27:09][356954844272375][4649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 17:27:09][356954844272375][4791 ms][DEBUG] SU: done in 142 ms; out [2025-08-25 17:27:09][356954844272375][4792 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 17:27:09][356954844272375][4792 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 17:27:09][356954844272375][4930 ms][DEBUG] SU: done in 139 ms; out [2025-08-25 17:27:09][356954844272375][4931 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 17:27:10][356954844272375][5119 ms][DEBUG] SU: done in 189 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 17:27:12][356954844272375][7133 ms][DEBUG] START check_boot_completed [2025-08-25 17:27:12][356954844272375][7133 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:27:12][356954844272375][7180 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:27:12][356954844272375][7180 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:27:12][356954844272375][7227 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:27:12][356954844272375][7227 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:27:15][356954844272375][10242 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 17:27:15][356954844272375][10242 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356954844272375\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"SAM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9504\"}'\'' -e'"" [2025-08-25 17:27:21][356954844272375][16709 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6cd617f-47f6-4064-9291-b690c0a3b933","id":"QR_f6cd617f-47f6-4064-9291-b690c0a3b933","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:27:21][356954844272375][16865 ms][DEBUG] proc_open done in 6623 ms; code=255; res.len=3343 [2025-08-25 17:27:21][356954844272375][16865 ms][DEBUG] END runCmdUntilRes#2 in 6624 ms [2025-08-25 17:27:21][356954844272375][16865 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:28:05][352032770590583][0 ms][INFO] === Request start === [2025-08-25 17:28:05][352032770590583][1 ms][DEBUG] START check_scloud [2025-08-25 17:28:05][352032770590583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:28:05][352032770590583][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 743 20899 23901432 128308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:28:05][352032770590583][296 ms][DEBUG] targetPkg: running [2025-08-25 17:28:05][352032770590583][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-25 17:28:05][352032770590583][296 ms][DEBUG] START check_boot_completed [2025-08-25 17:28:05][352032770590583][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:28:05][352032770590583][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:28:05][352032770590583][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:28:05][352032770590583][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:28:05][352032770590583][389 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:28:05][352032770590583][389 ms][DEBUG] START check_internet [2025-08-25 17:28:05][352032770590583][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:28:06][352032770590583][858 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.023/203.023/203.023/0.000 ms\n [2025-08-25 17:28:06][352032770590583][858 ms][DEBUG] check_internet: online [2025-08-25 17:28:06][352032770590583][858 ms][DEBUG] END check_internet in 469 ms [2025-08-25 17:28:06][352032770590583][858 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:28:06][352032770590583][858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352032770590583\",\"model\":\"SM-F721U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8562\"}'\'' -e'"" [2025-08-25 17:28:06][352032770590583][858 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:28:06][352032770590583][858 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352032770590583\",\"model\":\"SM-F721U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8562\"}'\'' -e'"" [2025-08-25 17:28:13][352032770590583][8543 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4e3f4c4-c313-4dca-9241-9ea755d74d6f","id":"QR_b4e3f4c4-c313-4dca-9241-9ea755d74d6f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:28:13][352032770590583][8700 ms][DEBUG] proc_open done in 7841 ms; code=255; res.len=3343 [2025-08-25 17:28:13][352032770590583][8700 ms][DEBUG] END runCmdUntilRes#1 in 7841 ms [2025-08-25 17:28:13][352032770590583][8700 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:28:18][350501380712151][0 ms][INFO] === Request start === [2025-08-25 17:28:18][350501380712151][1 ms][DEBUG] START check_scloud [2025-08-25 17:28:18][350501380712151][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:28:19][350501380712151][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 743 20899 24054080 138568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:28:19][350501380712151][268 ms][DEBUG] targetPkg: running [2025-08-25 17:28:19][350501380712151][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-25 17:28:19][350501380712151][268 ms][DEBUG] START check_boot_completed [2025-08-25 17:28:19][350501380712151][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:28:19][350501380712151][299 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:28:19][350501380712151][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:28:19][350501380712151][346 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:28:19][350501380712151][346 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:28:19][350501380712151][346 ms][DEBUG] START check_internet [2025-08-25 17:28:19][350501380712151][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:28:19][350501380712151][690 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.754/224.754/224.754/0.000 ms\n [2025-08-25 17:28:19][350501380712151][690 ms][DEBUG] check_internet: online [2025-08-25 17:28:19][350501380712151][690 ms][DEBUG] END check_internet in 344 ms [2025-08-25 17:28:19][350501380712151][690 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:28:19][350501380712151][690 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350501380712151\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8377\"}'\'' -e'"" [2025-08-25 17:28:19][350501380712151][690 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:28:19][350501380712151][690 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350501380712151\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8377\"}'\'' -e'"" [2025-08-25 17:28:23][350501380712151][4814 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_489c38a0-c266-4c6a-8242-bef4de9083a6","id":"QR_489c38a0-c266-4c6a-8242-bef4de9083a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:28:23][350501380712151][4970 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-25 17:28:23][350501380712151][4970 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-08-25 17:28:23][350501380712151][4970 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:28:27][350296215104621][0 ms][INFO] === Request start === [2025-08-25 17:28:27][350296215104621][1 ms][DEBUG] START check_scloud [2025-08-25 17:28:27][350296215104621][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:28:27][350296215104621][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 743 20899 24217224 150264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:28:27][350296215104621][261 ms][DEBUG] targetPkg: running [2025-08-25 17:28:27][350296215104621][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-25 17:28:27][350296215104621][261 ms][DEBUG] START check_boot_completed [2025-08-25 17:28:27][350296215104621][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:28:27][350296215104621][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:28:27][350296215104621][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:28:27][350296215104621][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:28:27][350296215104621][355 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:28:27][350296215104621][355 ms][DEBUG] START check_internet [2025-08-25 17:28:27][350296215104621][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:28:28][350296215104621][667 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.024/205.024/205.024/0.000 ms\n [2025-08-25 17:28:28][350296215104621][667 ms][DEBUG] check_internet: online [2025-08-25 17:28:28][350296215104621][667 ms][DEBUG] END check_internet in 312 ms [2025-08-25 17:28:28][350296215104621][667 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:28:28][350296215104621][667 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350296215104621\",\"model\":\"SM-S906U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6739\"}'\'' -e'"" [2025-08-25 17:28:28][350296215104621][667 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:28:28][350296215104621][667 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350296215104621\",\"model\":\"SM-S906U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6739\"}'\'' -e'"" [2025-08-25 17:28:33][350296215104621][6134 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b11e351a-d834-4b04-96b7-309a29096c23","id":"QR_b11e351a-d834-4b04-96b7-309a29096c23","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:28:33][350296215104621][6291 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-08-25 17:28:33][350296215104621][6291 ms][DEBUG] END runCmdUntilRes#1 in 5624 ms [2025-08-25 17:28:33][350296215104621][6291 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:31:04][350940410894664][1 ms][INFO] === Request start === [2025-08-25 17:31:04][350940410894664][1 ms][DEBUG] START check_scloud [2025-08-25 17:31:04][350940410894664][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:31:05][350940410894664][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 743 20899 24330868 161988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:31:05][350940410894664][275 ms][DEBUG] targetPkg: running [2025-08-25 17:31:05][350940410894664][275 ms][DEBUG] END check_scloud in 274 ms [2025-08-25 17:31:05][350940410894664][275 ms][DEBUG] START check_boot_completed [2025-08-25 17:31:05][350940410894664][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:31:05][350940410894664][304 ms][DEBUG] ADB: done in 29 ms; out [2025-08-25 17:31:05][350940410894664][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:31:05][350940410894664][367 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 17:31:05][350940410894664][367 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 17:31:05][350940410894664][367 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:31:05][350940410894664][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940410894664\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6974\"}'\'' -e'"" [2025-08-25 17:31:05][350940410894664][367 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:31:05][350940410894664][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350940410894664\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6974\"}'\'' -e'"" [2025-08-25 17:31:10][350940410894664][5678 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_751c33bf-f489-4299-8c31-b72320e6e93b","id":"QR_751c33bf-f489-4299-8c31-b72320e6e93b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:31:10][350940410894664][5834 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-08-25 17:31:10][350940410894664][5834 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-25 17:31:10][350940410894664][5834 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:32:03][357967973299273][0 ms][INFO] === Request start === [2025-08-25 17:32:03][357967973299273][1 ms][DEBUG] START check_scloud [2025-08-25 17:32:03][357967973299273][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:32:03][357967973299273][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 743 20899 24461080 173920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:32:03][357967973299273][256 ms][DEBUG] targetPkg: running [2025-08-25 17:32:03][357967973299273][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-25 17:32:03][357967973299273][256 ms][DEBUG] START check_boot_completed [2025-08-25 17:32:03][357967973299273][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:32:03][357967973299273][303 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:32:03][357967973299273][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:32:03][357967973299273][349 ms][DEBUG] SU: done in 46 ms; out [2025-08-25 17:32:03][357967973299273][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:32:03][357967973299273][349 ms][DEBUG] START check_internet [2025-08-25 17:32:03][357967973299273][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:32:03][357967973299273][850 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.246/202.246/202.246/0.000 ms\n [2025-08-25 17:32:03][357967973299273][850 ms][DEBUG] check_internet: online [2025-08-25 17:32:03][357967973299273][850 ms][DEBUG] END check_internet in 500 ms [2025-08-25 17:32:03][357967973299273][850 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:32:03][357967973299273][850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967973299273\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3095\"}'\'' -e'"" [2025-08-25 17:32:03][357967973299273][850 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:32:03][357967973299273][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967973299273\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3095\"}'\'' -e'"" [2025-08-25 17:32:08][357967973299273][5286 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35ee17f8-ce33-4393-b775-6fee6aec0d95","id":"QR_35ee17f8-ce33-4393-b775-6fee6aec0d95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:32:08][357967973299273][5442 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-25 17:32:08][357967973299273][5442 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-25 17:32:08][357967973299273][5442 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:32:11][354360418335618][0 ms][INFO] === Request start === [2025-08-25 17:32:11][354360418335618][1 ms][DEBUG] START check_scloud [2025-08-25 17:32:11][354360418335618][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:32:11][354360418335618][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 743 20899 24617888 184584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:32:11][354360418335618][267 ms][DEBUG] targetPkg: running [2025-08-25 17:32:11][354360418335618][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-25 17:32:11][354360418335618][267 ms][DEBUG] START check_boot_completed [2025-08-25 17:32:11][354360418335618][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:32:11][354360418335618][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:32:11][354360418335618][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:32:11][354360418335618][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:32:11][354360418335618][361 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:32:11][354360418335618][361 ms][DEBUG] START check_internet [2025-08-25 17:32:11][354360418335618][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:32:11][354360418335618][626 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=166 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 166.270/166.270/166.270/0.000 ms\n [2025-08-25 17:32:11][354360418335618][626 ms][DEBUG] check_internet: online [2025-08-25 17:32:11][354360418335618][626 ms][DEBUG] END check_internet in 266 ms [2025-08-25 17:32:11][354360418335618][627 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:32:11][354360418335618][627 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418335618\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4602\"}'\'' -e'"" [2025-08-25 17:32:11][354360418335618][627 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:32:11][354360418335618][627 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418335618\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4602\"}'\'' -e'"" [2025-08-25 17:32:15][354360418335618][4375 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7cb8c17c-63de-477b-924b-ea5a7126114e","id":"QR_7cb8c17c-63de-477b-924b-ea5a7126114e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:32:15][354360418335618][4531 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=3343 [2025-08-25 17:32:15][354360418335618][4532 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 17:32:15][354360418335618][4532 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:33:04][352364850336805][0 ms][INFO] === Request start === [2025-08-25 17:33:04][352364850336805][1 ms][DEBUG] START check_scloud [2025-08-25 17:33:04][352364850336805][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:33:05][352364850336805][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 743 20899 24795224 196364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:33:05][352364850336805][319 ms][DEBUG] targetPkg: running [2025-08-25 17:33:05][352364850336805][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 17:33:05][352364850336805][319 ms][DEBUG] START check_boot_completed [2025-08-25 17:33:05][352364850336805][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:33:05][352364850336805][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:33:05][352364850336805][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:33:05][352364850336805][428 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 17:33:05][352364850336805][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:33:05][352364850336805][428 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:33:05][352364850336805][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352364850336805\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9023\"}'\'' -e'"" [2025-08-25 17:33:05][352364850336805][429 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:33:05][352364850336805][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352364850336805\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9023\"}'\'' -e'"" [2025-08-25 17:33:11][352364850336805][6458 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_013889f8-7b07-44b1-98b7-64329236b0e1","id":"QR_013889f8-7b07-44b1-98b7-64329236b0e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:33:11][352364850336805][6614 ms][DEBUG] proc_open done in 6185 ms; code=255; res.len=3343 [2025-08-25 17:33:11][352364850336805][6614 ms][DEBUG] END runCmdUntilRes#1 in 6186 ms [2025-08-25 17:33:11][352364850336805][6614 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:34:03][352698475178633][1 ms][INFO] === Request start === [2025-08-25 17:34:03][352698475178633][1 ms][DEBUG] START check_scloud [2025-08-25 17:34:03][352698475178633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:34:03][352698475178633][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 743 20899 24902972 206768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:34:03][352698475178633][315 ms][DEBUG] targetPkg: running [2025-08-25 17:34:03][352698475178633][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 17:34:03][352698475178633][315 ms][DEBUG] START check_boot_completed [2025-08-25 17:34:03][352698475178633][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:34:04][352698475178633][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:34:04][352698475178633][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:34:04][352698475178633][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:34:04][352698475178633][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:34:04][352698475178633][425 ms][DEBUG] START check_internet [2025-08-25 17:34:04][352698475178633][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:34:04][352698475178633][737 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=173 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 173.283/173.283/173.283/0.000 ms\n [2025-08-25 17:34:04][352698475178633][737 ms][DEBUG] check_internet: online [2025-08-25 17:34:04][352698475178633][737 ms][DEBUG] END check_internet in 312 ms [2025-08-25 17:34:04][352698475178633][738 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:34:04][352698475178633][738 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698475178633\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9781\"}'\'' -e'"" [2025-08-25 17:34:04][352698475178633][738 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:34:04][352698475178633][738 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698475178633\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9781\"}'\'' -e'"" [2025-08-25 17:34:08][352698475178633][5001 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd6ca538-ddc7-4dd4-a9ae-54889936bce9","id":"QR_dd6ca538-ddc7-4dd4-a9ae-54889936bce9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:34:08][352698475178633][5158 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-25 17:34:08][352698475178633][5158 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-25 17:34:08][352698475178633][5158 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:36:05][353335865235868][0 ms][INFO] === Request start === [2025-08-25 17:36:05][353335865235868][0 ms][DEBUG] START check_scloud [2025-08-25 17:36:05][353335865235868][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:36:05][353335865235868][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 743 20899 25027104 217472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:36:05][353335865235868][318 ms][DEBUG] targetPkg: running [2025-08-25 17:36:05][353335865235868][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 17:36:05][353335865235868][319 ms][DEBUG] START check_boot_completed [2025-08-25 17:36:05][353335865235868][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:36:05][353335865235868][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:36:05][353335865235868][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:36:05][353335865235868][428 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:36:05][353335865235868][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:36:05][353335865235868][428 ms][DEBUG] START check_internet [2025-08-25 17:36:05][353335865235868][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:36:06][353335865235868][928 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.867/202.867/202.867/0.000 ms\n [2025-08-25 17:36:06][353335865235868][928 ms][DEBUG] check_internet: online [2025-08-25 17:36:06][353335865235868][928 ms][DEBUG] END check_internet in 500 ms [2025-08-25 17:36:06][353335865235868][928 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:36:06][353335865235868][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335865235868\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7175\"}'\'' -e'"" [2025-08-25 17:36:06][353335865235868][928 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:36:06][353335865235868][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335865235868\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7175\"}'\'' -e'"" [2025-08-25 17:36:11][353335865235868][6801 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc290de1-0255-4b7e-b0dd-d0fe4da14d06","id":"QR_fc290de1-0255-4b7e-b0dd-d0fe4da14d06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:36:12][353335865235868][6957 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-08-25 17:36:12][353335865235868][6957 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-08-25 17:36:12][353335865235868][6957 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:36:16][352192664082657][0 ms][INFO] === Request start === [2025-08-25 17:36:16][352192664082657][1 ms][DEBUG] START check_scloud [2025-08-25 17:36:16][352192664082657][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:36:17][352192664082657][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 743 20899 25158564 229304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:36:17][352192664082657][271 ms][DEBUG] targetPkg: running [2025-08-25 17:36:17][352192664082657][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-25 17:36:17][352192664082657][271 ms][DEBUG] START check_boot_completed [2025-08-25 17:36:17][352192664082657][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:36:17][352192664082657][302 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:36:17][352192664082657][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:36:17][352192664082657][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:36:17][352192664082657][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:36:17][352192664082657][349 ms][DEBUG] START check_internet [2025-08-25 17:36:17][352192664082657][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:36:17][352192664082657][646 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=176 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 176.693/176.693/176.693/0.000 ms\n [2025-08-25 17:36:17][352192664082657][646 ms][DEBUG] check_internet: online [2025-08-25 17:36:17][352192664082657][646 ms][DEBUG] END check_internet in 297 ms [2025-08-25 17:36:17][352192664082657][646 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:36:17][352192664082657][646 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192664082657\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9215\"}'\'' -e'"" [2025-08-25 17:36:17][352192664082657][646 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:36:17][352192664082657][646 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192664082657\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9215\"}'\'' -e'"" [2025-08-25 17:36:21][352192664082657][4770 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2abe2f4e-5038-43ee-903e-28344962e717","id":"QR_2abe2f4e-5038-43ee-903e-28344962e717","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:36:21][352192664082657][4926 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-25 17:36:21][352192664082657][4926 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-25 17:36:21][352192664082657][4926 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:37:03][350013907434533][0 ms][INFO] === Request start === [2025-08-25 17:37:03][350013907434533][1 ms][DEBUG] START check_scloud [2025-08-25 17:37:03][350013907434533][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:37:03][350013907434533][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 743 20899 25257956 232404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:37:03][350013907434533][255 ms][DEBUG] targetPkg: running [2025-08-25 17:37:03][350013907434533][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-25 17:37:03][350013907434533][255 ms][DEBUG] START check_boot_completed [2025-08-25 17:37:03][350013907434533][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:37:03][350013907434533][300 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 17:37:03][350013907434533][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:37:04][350013907434533][349 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 17:37:04][350013907434533][349 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:37:04][350013907434533][349 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:37:04][350013907434533][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013907434533\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1406\"}'\'' -e'"" [2025-08-25 17:37:04][350013907434533][349 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:37:04][350013907434533][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013907434533\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1406\"}'\'' -e'"" [2025-08-25 17:37:07][350013907434533][4205 ms][DEBUG] proc_open done in 3856 ms (timeout); code=4; out.len=0 err.len=89 [2025-08-25 17:37:07][350013907434533][4205 ms][DEBUG] END runCmdUntilRes#1 in 3856 ms [2025-08-25 17:37:07][350013907434533][4205 ms][WARN] Detected error: Process with pid 743 either refused to load frida-agent, or terminated during injection [2025-08-25 17:37:07][350013907434533][4205 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 17:37:08][350013907434533][4362 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 17:37:08][350013907434533][4362 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 17:37:08][350013907434533][4362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 17:37:08][350013907434533][4502 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 17:37:08][350013907434533][4502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 17:37:08][350013907434533][4659 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 17:37:10][350013907434533][6673 ms][DEBUG] START check_boot_completed [2025-08-25 17:37:10][350013907434533][6674 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:37:10][350013907434533][6721 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:37:10][350013907434533][6721 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:37:10][350013907434533][6783 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:37:10][350013907434533][6783 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:37:13][350013907434533][9798 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 17:37:13][350013907434533][9798 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013907434533\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1406\"}'\'' -e'"" [2025-08-25 17:37:17][350013907434533][13672 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3db1ad97-1b60-498e-af74-024b628ec3d7","id":"QR_3db1ad97-1b60-498e-af74-024b628ec3d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:37:17][350013907434533][13828 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-25 17:37:17][350013907434533][13828 ms][DEBUG] END runCmdUntilRes#2 in 4030 ms [2025-08-25 17:37:17][350013907434533][13828 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:38:03][351267961160827][0 ms][INFO] === Request start === [2025-08-25 17:38:03][351267961160827][1 ms][DEBUG] START check_scloud [2025-08-25 17:38:03][351267961160827][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:38:04][351267961160827][295 ms][DEBUG] SU: done in 293 ms; outu0_a118 2317 20899 23937300 127508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:38:04][351267961160827][295 ms][DEBUG] targetPkg: running [2025-08-25 17:38:04][351267961160827][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-25 17:38:04][351267961160827][295 ms][DEBUG] START check_boot_completed [2025-08-25 17:38:04][351267961160827][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:38:04][351267961160827][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:38:04][351267961160827][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:38:04][351267961160827][419 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 17:38:04][351267961160827][419 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-25 17:38:04][351267961160827][419 ms][DEBUG] START check_internet [2025-08-25 17:38:04][351267961160827][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:38:04][351267961160827][747 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.789/178.789/178.789/0.000 ms\n [2025-08-25 17:38:04][351267961160827][747 ms][DEBUG] check_internet: online [2025-08-25 17:38:04][351267961160827][747 ms][DEBUG] END check_internet in 328 ms [2025-08-25 17:38:04][351267961160827][747 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:38:04][351267961160827][747 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267961160827\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7640\"}'\'' -e'"" [2025-08-25 17:38:04][351267961160827][747 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:38:04][351267961160827][747 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267961160827\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7640\"}'\'' -e'"" [2025-08-25 17:38:08][351267961160827][4777 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a360f254-d630-42a1-8a7d-c71f6a333e34","id":"QR_a360f254-d630-42a1-8a7d-c71f6a333e34","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:38:08][351267961160827][4933 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 17:38:08][351267961160827][4933 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-25 17:38:08][351267961160827][4933 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:38:38][351787741332024][1 ms][INFO] === Request start === [2025-08-25 17:38:38][351787741332024][1 ms][DEBUG] START check_scloud [2025-08-25 17:38:38][351787741332024][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:38:38][351787741332024][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 2317 20899 24102264 137864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:38:38][351787741332024][254 ms][DEBUG] targetPkg: running [2025-08-25 17:38:38][351787741332024][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-25 17:38:38][351787741332024][254 ms][DEBUG] START check_boot_completed [2025-08-25 17:38:38][351787741332024][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:38:38][351787741332024][332 ms][DEBUG] ADB: done in 78 ms; out [2025-08-25 17:38:38][351787741332024][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:38:38][351787741332024][394 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:38:38][351787741332024][395 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 17:38:38][351787741332024][395 ms][DEBUG] START check_internet [2025-08-25 17:38:38][351787741332024][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:38:39][351787741332024][676 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=170 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 170.829/170.829/170.829/0.000 ms\n [2025-08-25 17:38:39][351787741332024][676 ms][DEBUG] check_internet: online [2025-08-25 17:38:39][351787741332024][676 ms][DEBUG] END check_internet in 281 ms [2025-08-25 17:38:39][351787741332024][676 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:38:39][351787741332024][676 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1145\"}'\'' -e'"" [2025-08-25 17:38:39][351787741332024][676 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:38:39][351787741332024][676 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1145\"}'\'' -e'"" [2025-08-25 17:38:42][351787741332024][4190 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:38:42][351787741332024][4346 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=107 [2025-08-25 17:38:42][351787741332024][4347 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-08-25 17:38:42][351787741332024][4347 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:38:43][][0 ms][INFO] === Request start === [2025-08-25 17:38:43][][1 ms][DEBUG] START check_scloud [2025-08-25 17:38:43][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:38:43][][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 2317 20899 24259008 149308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:38:43][][302 ms][DEBUG] targetPkg: running [2025-08-25 17:38:43][][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 17:38:43][][302 ms][DEBUG] START check_boot_completed [2025-08-25 17:38:43][][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:38:43][][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:38:43][][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:38:43][][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:38:43][][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:38:43][][395 ms][DEBUG] START check_internet [2025-08-25 17:38:43][][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:38:43][][629 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=135 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 135.664/135.664/135.664/0.000 ms\n [2025-08-25 17:38:43][][630 ms][DEBUG] check_internet: online [2025-08-25 17:38:43][][630 ms][DEBUG] END check_internet in 234 ms [2025-08-25 17:38:43][][630 ms][DEBUG] rawBody.length=1129 [2025-08-25 17:38:43][][630 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6743\"}'\'' -e'"" [2025-08-25 17:38:43][][630 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:38:43][][630 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6743\"}'\'' -e'"" [2025-08-25 17:38:46][][3910 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:38:47][][4066 ms][DEBUG] proc_open done in 3437 ms; code=255; res.len=107 [2025-08-25 17:38:47][][4066 ms][DEBUG] END runCmdUntilRes#1 in 3437 ms [2025-08-25 17:38:47][][4066 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:38:49][351787741332024][0 ms][INFO] === Request start === [2025-08-25 17:38:49][351787741332024][1 ms][DEBUG] START check_scloud [2025-08-25 17:38:49][351787741332024][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:38:49][351787741332024][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 2317 20899 24399368 160248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:38:49][351787741332024][299 ms][DEBUG] targetPkg: running [2025-08-25 17:38:49][351787741332024][299 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 17:38:49][351787741332024][299 ms][DEBUG] START check_boot_completed [2025-08-25 17:38:49][351787741332024][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:38:49][351787741332024][344 ms][DEBUG] ADB: done in 44 ms; out [2025-08-25 17:38:49][351787741332024][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:38:49][351787741332024][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:38:49][351787741332024][391 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 17:38:49][351787741332024][391 ms][DEBUG] START check_internet [2025-08-25 17:38:49][351787741332024][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:38:49][351787741332024][625 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.255/140.255/140.255/0.000 ms\n [2025-08-25 17:38:49][351787741332024][625 ms][DEBUG] check_internet: online [2025-08-25 17:38:49][351787741332024][625 ms][DEBUG] END check_internet in 234 ms [2025-08-25 17:38:49][351787741332024][625 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:38:49][351787741332024][625 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8785\"}'\'' -e'"" [2025-08-25 17:38:49][351787741332024][625 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:38:49][351787741332024][625 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8785\"}'\'' -e'"" [2025-08-25 17:38:53][351787741332024][4843 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:38:54][351787741332024][4999 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=107 [2025-08-25 17:38:54][351787741332024][4999 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-25 17:38:54][351787741332024][4999 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:38:54][][0 ms][INFO] === Request start === [2025-08-25 17:38:54][][1 ms][DEBUG] START check_scloud [2025-08-25 17:38:54][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:38:54][][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 2317 20899 24547920 172008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:38:54][][265 ms][DEBUG] targetPkg: running [2025-08-25 17:38:54][][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-25 17:38:54][][265 ms][DEBUG] START check_boot_completed [2025-08-25 17:38:54][][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:38:54][][311 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:38:54][][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:38:54][][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:38:54][][358 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:38:54][][358 ms][DEBUG] START check_internet [2025-08-25 17:38:54][][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:38:55][][671 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=167 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 167.207/167.207/167.207/0.000 ms\n [2025-08-25 17:38:55][][671 ms][DEBUG] check_internet: online [2025-08-25 17:38:55][][671 ms][DEBUG] END check_internet in 312 ms [2025-08-25 17:38:55][][671 ms][DEBUG] rawBody.length=1130 [2025-08-25 17:38:55][][671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6833\"}'\'' -e'"" [2025-08-25 17:38:55][][671 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:38:55][][671 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6833\"}'\'' -e'"" [2025-08-25 17:39:03][][8809 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:39:03][][8965 ms][DEBUG] proc_open done in 8295 ms; code=255; res.len=107 [2025-08-25 17:39:03][][8965 ms][DEBUG] END runCmdUntilRes#1 in 8295 ms [2025-08-25 17:39:03][][8965 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:39:30][351787741332024][1 ms][INFO] === Request start === [2025-08-25 17:39:30][351787741332024][1 ms][DEBUG] START check_scloud [2025-08-25 17:39:30][351787741332024][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:39:31][351787741332024][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 2317 20899 24632792 183616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:39:31][351787741332024][298 ms][DEBUG] targetPkg: running [2025-08-25 17:39:31][351787741332024][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 17:39:31][351787741332024][298 ms][DEBUG] START check_boot_completed [2025-08-25 17:39:31][351787741332024][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:39:31][351787741332024][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:39:31][351787741332024][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:39:31][351787741332024][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:39:31][351787741332024][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:39:31][351787741332024][391 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:39:31][351787741332024][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5396\"}'\'' -e'"" [2025-08-25 17:39:31][351787741332024][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:39:31][351787741332024][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5396\"}'\'' -e'"" [2025-08-25 17:39:34][351787741332024][3969 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:39:35][351787741332024][4125 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=107 [2025-08-25 17:39:35][351787741332024][4125 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-25 17:39:35][351787741332024][4125 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:39:35][][0 ms][INFO] === Request start === [2025-08-25 17:39:35][][1 ms][DEBUG] START check_scloud [2025-08-25 17:39:35][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:39:35][][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 2317 20899 24775392 195420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:39:35][][304 ms][DEBUG] targetPkg: running [2025-08-25 17:39:35][][304 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 17:39:35][][304 ms][DEBUG] START check_boot_completed [2025-08-25 17:39:35][][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:39:35][][350 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 17:39:35][][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:39:35][][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:39:35][][396 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 17:39:35][][396 ms][DEBUG] rawBody.length=1129 [2025-08-25 17:39:35][][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6862\"}'\'' -e'"" [2025-08-25 17:39:35][][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:39:35][][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6862\"}'\'' -e'"" [2025-08-25 17:39:39][][3802 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:39:39][][3958 ms][DEBUG] proc_open done in 3562 ms; code=255; res.len=107 [2025-08-25 17:39:39][][3958 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-08-25 17:39:39][][3958 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:39:41][351787741332024][0 ms][INFO] === Request start === [2025-08-25 17:39:41][351787741332024][0 ms][DEBUG] START check_scloud [2025-08-25 17:39:41][351787741332024][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:39:41][351787741332024][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 2317 20899 24928040 206160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:39:41][351787741332024][304 ms][DEBUG] targetPkg: running [2025-08-25 17:39:41][351787741332024][304 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 17:39:41][351787741332024][304 ms][DEBUG] START check_boot_completed [2025-08-25 17:39:41][351787741332024][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:39:41][351787741332024][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:39:41][351787741332024][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:39:41][351787741332024][384 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 17:39:41][351787741332024][384 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-25 17:39:41][351787741332024][384 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:39:41][351787741332024][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3574\"}'\'' -e'"" [2025-08-25 17:39:41][351787741332024][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:39:41][351787741332024][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3574\"}'\'' -e'"" [2025-08-25 17:39:47][351787741332024][6318 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:39:47][351787741332024][6474 ms][DEBUG] proc_open done in 6090 ms; code=255; res.len=107 [2025-08-25 17:39:47][351787741332024][6474 ms][DEBUG] END runCmdUntilRes#1 in 6090 ms [2025-08-25 17:39:47][351787741332024][6474 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:39:48][][0 ms][INFO] === Request start === [2025-08-25 17:39:48][][1 ms][DEBUG] START check_scloud [2025-08-25 17:39:48][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:39:48][][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 2317 20899 25064496 218280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:39:48][][280 ms][DEBUG] targetPkg: running [2025-08-25 17:39:48][][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-25 17:39:48][][280 ms][DEBUG] START check_boot_completed [2025-08-25 17:39:48][][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:39:48][][311 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:39:48][][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:39:48][][373 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 17:39:48][][373 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:39:48][][373 ms][DEBUG] rawBody.length=1130 [2025-08-25 17:39:48][][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8238\"}'\'' -e'"" [2025-08-25 17:39:48][][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:39:48][][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8238\"}'\'' -e'"" [2025-08-25 17:39:53][][5044 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:39:53][][5200 ms][DEBUG] proc_open done in 4826 ms; code=255; res.len=107 [2025-08-25 17:39:53][][5200 ms][DEBUG] END runCmdUntilRes#1 in 4826 ms [2025-08-25 17:39:53][][5200 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:41:03][351272330383779][0 ms][INFO] === Request start === [2025-08-25 17:41:03][351272330383779][1 ms][DEBUG] START check_scloud [2025-08-25 17:41:03][351272330383779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:41:04][351272330383779][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 2317 20899 25122856 229372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:41:04][351272330383779][312 ms][DEBUG] targetPkg: running [2025-08-25 17:41:04][351272330383779][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 17:41:04][351272330383779][312 ms][DEBUG] START check_boot_completed [2025-08-25 17:41:04][351272330383779][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:41:04][351272330383779][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:41:04][351272330383779][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:41:04][351272330383779][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:41:04][351272330383779][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:41:04][351272330383779][390 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:41:04][351272330383779][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330383779\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9077\"}'\'' -e'"" [2025-08-25 17:41:04][351272330383779][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:41:04][351272330383779][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330383779\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9077\"}'\'' -e'"" [2025-08-25 17:41:08][351272330383779][4576 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da9ab753-3cc3-4f3c-98c8-8a92f8d60d9c","id":"QR_da9ab753-3cc3-4f3c-98c8-8a92f8d60d9c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:41:08][351272330383779][4732 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3343 [2025-08-25 17:41:08][351272330383779][4732 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-25 17:41:08][351272330383779][4733 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:42:30][355170560492136][1 ms][INFO] === Request start === [2025-08-25 17:42:30][355170560492136][1 ms][DEBUG] START check_scloud [2025-08-25 17:42:30][355170560492136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:42:31][355170560492136][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 2317 20899 25234572 241408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:42:31][355170560492136][301 ms][DEBUG] targetPkg: running [2025-08-25 17:42:31][355170560492136][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 17:42:31][355170560492136][302 ms][DEBUG] START check_boot_completed [2025-08-25 17:42:31][355170560492136][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:42:31][355170560492136][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:42:31][355170560492136][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:42:31][355170560492136][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:42:31][355170560492136][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:42:31][355170560492136][395 ms][DEBUG] START check_internet [2025-08-25 17:42:31][355170560492136][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:42:31][355170560492136][941 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.718/201.718/201.718/0.000 ms\n [2025-08-25 17:42:31][355170560492136][942 ms][DEBUG] check_internet: online [2025-08-25 17:42:31][355170560492136][942 ms][DEBUG] END check_internet in 546 ms [2025-08-25 17:42:31][355170560492136][942 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:42:31][355170560492136][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9562\"}'\'' -e'"" [2025-08-25 17:42:31][355170560492136][942 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:42:31][355170560492136][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9562\"}'\'' -e'"" [2025-08-25 17:42:35][355170560492136][4612 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 17:42:35][355170560492136][4612 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-25 17:42:35][355170560492136][4612 ms][WARN] Detected error: Process with pid 2317 either refused to load frida-agent, or terminated during injection [2025-08-25 17:42:35][355170560492136][4612 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 17:42:35][355170560492136][4753 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 17:42:35][355170560492136][4753 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 17:42:35][355170560492136][4753 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 17:42:35][355170560492136][4878 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 17:42:35][355170560492136][4878 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 17:42:36][355170560492136][5034 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 17:42:38][355170560492136][7049 ms][DEBUG] START check_boot_completed [2025-08-25 17:42:38][355170560492136][7049 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:42:38][355170560492136][7096 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:42:38][355170560492136][7096 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:42:38][355170560492136][7144 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:42:38][355170560492136][7144 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 17:42:41][355170560492136][10158 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 17:42:41][355170560492136][10158 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9562\"}'\'' -e'"" [2025-08-25 17:42:45][355170560492136][14407 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-25 17:42:45][355170560492136][14563 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=101 [2025-08-25 17:42:45][355170560492136][14563 ms][DEBUG] END runCmdUntilRes#2 in 4405 ms [2025-08-25 17:42:45][355170560492136][14563 ms][INFO] SUCCESS response from frida (len=101) [2025-08-25 17:42:45][][0 ms][INFO] === Request start === [2025-08-25 17:42:45][][1 ms][DEBUG] START check_scloud [2025-08-25 17:42:45][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:42:46][][296 ms][DEBUG] SU: done in 296 ms; outu0_a118 3591 20899 23963676 124532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:42:46][][296 ms][DEBUG] targetPkg: running [2025-08-25 17:42:46][][296 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 17:42:46][][297 ms][DEBUG] START check_boot_completed [2025-08-25 17:42:46][][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:42:46][][343 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:42:46][][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:42:46][][437 ms][DEBUG] SU: done in 93 ms; out [2025-08-25 17:42:46][][437 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 17:42:46][][437 ms][DEBUG] START check_internet [2025-08-25 17:42:46][][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:42:46][][687 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.220/143.220/143.220/0.000 ms\n [2025-08-25 17:42:46][][687 ms][DEBUG] check_internet: online [2025-08-25 17:42:46][][687 ms][DEBUG] END check_internet in 250 ms [2025-08-25 17:42:46][][687 ms][DEBUG] rawBody.length=1130 [2025-08-25 17:42:46][][687 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7517\"}'\'' -e'"" [2025-08-25 17:42:46][][687 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:42:46][][687 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7517\"}'\'' -e'"" [2025-08-25 17:42:50][][4608 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-25 17:42:50][][4764 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=101 [2025-08-25 17:42:50][][4764 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-25 17:42:50][][4764 ms][INFO] SUCCESS response from frida (len=101) [2025-08-25 17:42:51][355170560492136][0 ms][INFO] === Request start === [2025-08-25 17:42:51][355170560492136][1 ms][DEBUG] START check_scloud [2025-08-25 17:42:51][355170560492136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:42:51][355170560492136][242 ms][DEBUG] SU: done in 241 ms; outu0_a118 3591 20899 24079716 136104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:42:51][355170560492136][242 ms][DEBUG] targetPkg: running [2025-08-25 17:42:51][355170560492136][242 ms][DEBUG] END check_scloud in 242 ms [2025-08-25 17:42:51][355170560492136][242 ms][DEBUG] START check_boot_completed [2025-08-25 17:42:51][355170560492136][242 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:42:51][355170560492136][274 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:42:51][355170560492136][274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:42:51][355170560492136][320 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:42:51][355170560492136][320 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:42:51][355170560492136][320 ms][DEBUG] START check_internet [2025-08-25 17:42:51][355170560492136][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:42:51][355170560492136][570 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.574/137.574/137.574/0.000 ms\n [2025-08-25 17:42:51][355170560492136][570 ms][DEBUG] check_internet: online [2025-08-25 17:42:51][355170560492136][570 ms][DEBUG] END check_internet in 250 ms [2025-08-25 17:42:51][355170560492136][570 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:42:51][355170560492136][570 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7503\"}'\'' -e'"" [2025-08-25 17:42:51][355170560492136][571 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:42:51][355170560492136][571 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355170560492136\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7503\"}'\'' -e'"" [2025-08-25 17:42:55][355170560492136][4304 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:42:55][355170560492136][4460 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=107 [2025-08-25 17:42:55][355170560492136][4460 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-25 17:42:55][355170560492136][4460 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:42:56][][0 ms][INFO] === Request start === [2025-08-25 17:42:56][][1 ms][DEBUG] START check_scloud [2025-08-25 17:42:56][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:42:56][][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 3591 20899 24267448 149924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:42:56][][303 ms][DEBUG] targetPkg: running [2025-08-25 17:42:56][][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 17:42:56][][303 ms][DEBUG] START check_boot_completed [2025-08-25 17:42:56][][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:42:56][][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:42:56][][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:42:56][][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:42:56][][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:42:56][][397 ms][DEBUG] START check_internet [2025-08-25 17:42:56][][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:42:56][][662 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=132 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 132.685/132.685/132.685/0.000 ms\n [2025-08-25 17:42:56][][662 ms][DEBUG] check_internet: online [2025-08-25 17:42:56][][662 ms][DEBUG] END check_internet in 266 ms [2025-08-25 17:42:56][][662 ms][DEBUG] rawBody.length=1129 [2025-08-25 17:42:56][][662 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8623\"}'\'' -e'"" [2025-08-25 17:42:56][][662 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:42:56][][662 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60PYP8W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8623\"}'\'' -e'"" [2025-08-25 17:43:00][][3911 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:43:00][][4067 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=107 [2025-08-25 17:43:00][][4067 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-08-25 17:43:00][][4068 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:43:29][357714710501334][0 ms][INFO] === Request start === [2025-08-25 17:43:29][357714710501334][1 ms][DEBUG] START check_scloud [2025-08-25 17:43:29][357714710501334][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:43:30][357714710501334][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 3591 20899 24255744 161360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:43:30][357714710501334][320 ms][DEBUG] targetPkg: running [2025-08-25 17:43:30][357714710501334][320 ms][DEBUG] END check_scloud in 320 ms [2025-08-25 17:43:30][357714710501334][320 ms][DEBUG] START check_boot_completed [2025-08-25 17:43:30][357714710501334][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:43:30][357714710501334][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:43:30][357714710501334][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:43:30][357714710501334][414 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:43:30][357714710501334][414 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:43:30][357714710501334][414 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:43:30][357714710501334][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357714710501334\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6940\"}'\'' -e'"" [2025-08-25 17:43:30][357714710501334][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:43:30][357714710501334][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357714710501334\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6940\"}'\'' -e'"" [2025-08-25 17:43:35][357714710501334][5647 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6696a9e7-bd90-4134-81bb-6d65e20e413d","id":"QR_6696a9e7-bd90-4134-81bb-6d65e20e413d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:43:35][357714710501334][5803 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-08-25 17:43:35][357714710501334][5803 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-08-25 17:43:35][357714710501334][5803 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:44:05][353428896811771][0 ms][INFO] === Request start === [2025-08-25 17:44:05][353428896811771][1 ms][DEBUG] START check_scloud [2025-08-25 17:44:05][353428896811771][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:44:05][353428896811771][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 3591 20899 24400100 172348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:44:05][353428896811771][304 ms][DEBUG] targetPkg: running [2025-08-25 17:44:05][353428896811771][304 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 17:44:05][353428896811771][304 ms][DEBUG] START check_boot_completed [2025-08-25 17:44:05][353428896811771][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:44:05][353428896811771][350 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 17:44:05][353428896811771][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:44:05][353428896811771][414 ms][DEBUG] SU: done in 64 ms; out [2025-08-25 17:44:05][353428896811771][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:44:05][353428896811771][414 ms][DEBUG] START check_internet [2025-08-25 17:44:05][353428896811771][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:44:05][353428896811771][756 ms][DEBUG] SU: done in 342 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.454/231.454/231.454/0.000 ms\n [2025-08-25 17:44:05][353428896811771][756 ms][DEBUG] check_internet: online [2025-08-25 17:44:05][353428896811771][756 ms][DEBUG] END check_internet in 342 ms [2025-08-25 17:44:05][353428896811771][756 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:44:05][353428896811771][756 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428896811771\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2732\"}'\'' -e'"" [2025-08-25 17:44:05][353428896811771][756 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:44:05][353428896811771][756 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353428896811771\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2732\"}'\'' -e'"" [2025-08-25 17:44:10][353428896811771][5302 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea27c5a9-8950-4057-a676-4b9294ef8398","id":"QR_ea27c5a9-8950-4057-a676-4b9294ef8398","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:44:10][353428896811771][5458 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-08-25 17:44:10][353428896811771][5458 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-25 17:44:10][353428896811771][5458 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:46:03][350481057185512][1 ms][INFO] === Request start === [2025-08-25 17:46:03][350481057185512][1 ms][DEBUG] START check_scloud [2025-08-25 17:46:03][350481057185512][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:46:03][350481057185512][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 3591 20899 24550744 183616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:46:03][350481057185512][312 ms][DEBUG] targetPkg: running [2025-08-25 17:46:03][350481057185512][313 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 17:46:03][350481057185512][313 ms][DEBUG] START check_boot_completed [2025-08-25 17:46:03][350481057185512][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:46:03][350481057185512][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:46:03][350481057185512][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:46:04][350481057185512][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:46:04][350481057185512][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:46:04][350481057185512][407 ms][DEBUG] START check_internet [2025-08-25 17:46:04][350481057185512][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:46:04][350481057185512][875 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.509/202.509/202.509/0.000 ms\n [2025-08-25 17:46:04][350481057185512][875 ms][DEBUG] check_internet: online [2025-08-25 17:46:04][350481057185512][875 ms][DEBUG] END check_internet in 468 ms [2025-08-25 17:46:04][350481057185512][875 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:46:04][350481057185512][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481057185512\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1300\"}'\'' -e'"" [2025-08-25 17:46:04][350481057185512][875 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:46:04][350481057185512][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350481057185512\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1300\"}'\'' -e'"" [2025-08-25 17:46:08][350481057185512][5217 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a13dec85-9080-46e7-bb7b-6cb38624fa38","id":"QR_a13dec85-9080-46e7-bb7b-6cb38624fa38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:46:08][350481057185512][5373 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-25 17:46:08][350481057185512][5374 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-25 17:46:08][350481057185512][5374 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:47:03][350178736626458][0 ms][INFO] === Request start === [2025-08-25 17:47:03][350178736626458][1 ms][DEBUG] START check_scloud [2025-08-25 17:47:03][350178736626458][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:47:03][350178736626458][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 3591 20899 24687036 195476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:47:03][350178736626458][302 ms][DEBUG] targetPkg: running [2025-08-25 17:47:03][350178736626458][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 17:47:03][350178736626458][302 ms][DEBUG] START check_boot_completed [2025-08-25 17:47:03][350178736626458][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:47:03][350178736626458][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:47:03][350178736626458][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:47:04][350178736626458][381 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 17:47:04][350178736626458][381 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 17:47:04][350178736626458][381 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:47:04][350178736626458][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178736626458\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4803\"}'\'' -e'"" [2025-08-25 17:47:04][350178736626458][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:47:04][350178736626458][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178736626458\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4803\"}'\'' -e'"" [2025-08-25 17:47:07][350178736626458][4254 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8849897a-6c7b-456e-a37d-e0144de4f015","id":"QR_8849897a-6c7b-456e-a37d-e0144de4f015","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:47:08][350178736626458][4410 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-25 17:47:08][350178736626458][4410 ms][DEBUG] END runCmdUntilRes#1 in 4029 ms [2025-08-25 17:47:08][350178736626458][4410 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:49:30][356463671238145][1 ms][INFO] === Request start === [2025-08-25 17:49:30][356463671238145][1 ms][DEBUG] START check_scloud [2025-08-25 17:49:30][356463671238145][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:49:30][356463671238145][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 3591 20899 24802976 206688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:49:30][356463671238145][300 ms][DEBUG] targetPkg: running [2025-08-25 17:49:30][356463671238145][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 17:49:30][356463671238145][300 ms][DEBUG] START check_boot_completed [2025-08-25 17:49:30][356463671238145][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:49:30][356463671238145][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:49:30][356463671238145][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:49:30][356463671238145][410 ms][DEBUG] SU: done in 64 ms; out [2025-08-25 17:49:30][356463671238145][410 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 17:49:30][356463671238145][410 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:49:30][356463671238145][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356463671238145\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6057\"}'\'' -e'"" [2025-08-25 17:49:30][356463671238145][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:49:30][356463671238145][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356463671238145\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6057\"}'\'' -e'"" [2025-08-25 17:49:39][356463671238145][9110 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:49:39][356463671238145][9266 ms][DEBUG] proc_open done in 8855 ms; code=255; res.len=107 [2025-08-25 17:49:39][356463671238145][9266 ms][DEBUG] END runCmdUntilRes#1 in 8856 ms [2025-08-25 17:49:39][356463671238145][9266 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:49:39][][0 ms][INFO] === Request start === [2025-08-25 17:49:39][][1 ms][DEBUG] START check_scloud [2025-08-25 17:49:39][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:49:40][][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 3591 20899 24964008 218856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:49:40][][285 ms][DEBUG] targetPkg: running [2025-08-25 17:49:40][][285 ms][DEBUG] END check_scloud in 284 ms [2025-08-25 17:49:40][][285 ms][DEBUG] START check_boot_completed [2025-08-25 17:49:40][][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:49:40][][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:49:40][][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:49:40][][394 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:49:40][][394 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:49:40][][394 ms][DEBUG] rawBody.length=1129 [2025-08-25 17:49:40][][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R59X4003SZV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9765\"}'\'' -e'"" [2025-08-25 17:49:40][][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:49:40][][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R59X4003SZV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9765\"}'\'' -e'"" [2025-08-25 17:49:43][][3971 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:49:43][][4127 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=107 [2025-08-25 17:49:43][][4127 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-25 17:49:43][][4127 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:49:45][356463671238145][0 ms][INFO] === Request start === [2025-08-25 17:49:45][356463671238145][1 ms][DEBUG] START check_scloud [2025-08-25 17:49:45][356463671238145][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:49:46][356463671238145][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 3591 20899 25118896 229676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:49:46][356463671238145][276 ms][DEBUG] targetPkg: running [2025-08-25 17:49:46][356463671238145][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-25 17:49:46][356463671238145][276 ms][DEBUG] START check_boot_completed [2025-08-25 17:49:46][356463671238145][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:49:46][356463671238145][322 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:49:46][356463671238145][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:49:46][356463671238145][385 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:49:46][356463671238145][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:49:46][356463671238145][385 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:49:46][356463671238145][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356463671238145\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3973\"}'\'' -e'"" [2025-08-25 17:49:46][356463671238145][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:49:46][356463671238145][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356463671238145\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3973\"}'\'' -e'"" [2025-08-25 17:49:51][356463671238145][5540 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_279e86ed-9203-4653-9e7a-34768d049b60","id":"QR_279e86ed-9203-4653-9e7a-34768d049b60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:49:51][356463671238145][5696 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-25 17:49:51][356463671238145][5696 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-25 17:49:51][356463671238145][5696 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:51:05][356927263715041][1 ms][INFO] === Request start === [2025-08-25 17:51:05][356927263715041][1 ms][DEBUG] START check_scloud [2025-08-25 17:51:05][356927263715041][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:51:05][356927263715041][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 3591 20899 25193292 241816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:51:05][356927263715041][297 ms][DEBUG] targetPkg: running [2025-08-25 17:51:05][356927263715041][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 17:51:05][356927263715041][297 ms][DEBUG] START check_boot_completed [2025-08-25 17:51:05][356927263715041][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:51:05][356927263715041][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:51:05][356927263715041][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:51:05][356927263715041][392 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 17:51:05][356927263715041][393 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 17:51:05][356927263715041][393 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:51:05][356927263715041][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927263715041\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2377\"}'\'' -e'"" [2025-08-25 17:51:05][356927263715041][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:51:05][356927263715041][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927263715041\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2377\"}'\'' -e'"" [2025-08-25 17:51:09][356927263715041][4046 ms][DEBUG] proc_open done in 3653 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 17:51:09][356927263715041][4046 ms][DEBUG] END runCmdUntilRes#1 in 3653 ms [2025-08-25 17:51:09][356927263715041][4046 ms][WARN] Detected error: Process with pid 3591 either refused to load frida-agent, or terminated during injection [2025-08-25 17:51:09][356927263715041][4046 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 17:51:09][356927263715041][4186 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 17:51:09][356927263715041][4186 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 17:51:09][356927263715041][4186 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 17:51:09][356927263715041][4296 ms][DEBUG] SU: done in 109 ms; out [2025-08-25 17:51:09][356927263715041][4296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 17:51:09][356927263715041][4468 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 17:51:11][356927263715041][6482 ms][DEBUG] START check_boot_completed [2025-08-25 17:51:11][356927263715041][6483 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:51:11][356927263715041][6529 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:51:11][356927263715041][6529 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:51:11][356927263715041][6576 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:51:11][356927263715041][6576 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:51:14][356927263715041][9591 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 17:51:14][356927263715041][9591 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927263715041\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2377\"}'\'' -e'"" [2025-08-25 17:51:20][356927263715041][15059 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a6075e3-9db4-4606-995f-8e4fa177ed9a","id":"QR_8a6075e3-9db4-4606-995f-8e4fa177ed9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:51:20][356927263715041][15215 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-08-25 17:51:20][356927263715041][15215 ms][DEBUG] END runCmdUntilRes#2 in 5624 ms [2025-08-25 17:51:20][356927263715041][15215 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:52:05][359117200137494][0 ms][INFO] === Request start === [2025-08-25 17:52:05][359117200137494][1 ms][DEBUG] START check_scloud [2025-08-25 17:52:05][359117200137494][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:52:06][359117200137494][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 5719 20899 23944816 127900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:52:06][359117200137494][318 ms][DEBUG] targetPkg: running [2025-08-25 17:52:06][359117200137494][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 17:52:06][359117200137494][318 ms][DEBUG] START check_boot_completed [2025-08-25 17:52:06][359117200137494][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:52:06][359117200137494][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:52:06][359117200137494][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:52:06][359117200137494][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:52:06][359117200137494][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:52:06][359117200137494][427 ms][DEBUG] START check_internet [2025-08-25 17:52:06][359117200137494][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:52:06][359117200137494][896 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.603/200.603/200.603/0.000 ms\n [2025-08-25 17:52:06][359117200137494][896 ms][DEBUG] check_internet: online [2025-08-25 17:52:06][359117200137494][896 ms][DEBUG] END check_internet in 468 ms [2025-08-25 17:52:06][359117200137494][896 ms][DEBUG] rawBody.length=1159 [2025-08-25 17:52:06][359117200137494][896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359117200137494\",\"model\":\"SM-X510\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52XA0LZYCT\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MXO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6339\"}'\'' -e'"" [2025-08-25 17:52:06][359117200137494][896 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:52:06][359117200137494][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359117200137494\",\"model\":\"SM-X510\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52XA0LZYCT\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MXO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6339\"}'\'' -e'"" [2025-08-25 17:52:11][359117200137494][5973 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3165a9d2-46fb-4043-ba3b-b45add08983a","id":"QR_3165a9d2-46fb-4043-ba3b-b45add08983a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:52:12][359117200137494][6129 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-08-25 17:52:12][359117200137494][6129 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-08-25 17:52:12][359117200137494][6129 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:53:04][353684143312084][0 ms][INFO] === Request start === [2025-08-25 17:53:04][353684143312084][1 ms][DEBUG] START check_scloud [2025-08-25 17:53:04][353684143312084][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:53:04][353684143312084][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 5719 20899 24076884 138204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:53:04][353684143312084][312 ms][DEBUG] targetPkg: running [2025-08-25 17:53:04][353684143312084][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 17:53:04][353684143312084][313 ms][DEBUG] START check_boot_completed [2025-08-25 17:53:04][353684143312084][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:53:04][353684143312084][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:53:04][353684143312084][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:53:04][353684143312084][453 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 17:53:04][353684143312084][453 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 17:53:04][353684143312084][453 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:53:04][353684143312084][453 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143312084\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6629\"}'\'' -e'"" [2025-08-25 17:53:04][353684143312084][453 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:53:04][353684143312084][453 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143312084\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6629\"}'\'' -e'"" [2025-08-25 17:53:08][353684143312084][4514 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3052b7bd-3cec-4b43-851a-e794feb2eee3","id":"QR_3052b7bd-3cec-4b43-851a-e794feb2eee3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:53:08][353684143312084][4671 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-25 17:53:08][353684143312084][4671 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-25 17:53:08][353684143312084][4671 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:54:05][352516402312028][0 ms][INFO] === Request start === [2025-08-25 17:54:05][352516402312028][0 ms][DEBUG] START check_scloud [2025-08-25 17:54:05][352516402312028][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:54:05][352516402312028][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 5719 20899 24191596 150200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:54:05][352516402312028][281 ms][DEBUG] targetPkg: running [2025-08-25 17:54:05][352516402312028][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-25 17:54:05][352516402312028][281 ms][DEBUG] START check_boot_completed [2025-08-25 17:54:05][352516402312028][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:54:05][352516402312028][312 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:54:05][352516402312028][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:54:05][352516402312028][374 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:54:05][352516402312028][374 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:54:05][352516402312028][374 ms][DEBUG] START check_internet [2025-08-25 17:54:05][352516402312028][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:54:05][352516402312028][749 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.062/259.062/259.062/0.000 ms\n [2025-08-25 17:54:05][352516402312028][750 ms][DEBUG] check_internet: online [2025-08-25 17:54:05][352516402312028][750 ms][DEBUG] END check_internet in 375 ms [2025-08-25 17:54:05][352516402312028][750 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:54:05][352516402312028][750 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352516402312028\",\"model\":\"SM-S906U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4761\"}'\'' -e'"" [2025-08-25 17:54:05][352516402312028][750 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:54:05][352516402312028][750 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352516402312028\",\"model\":\"SM-S906U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4761\"}'\'' -e'"" [2025-08-25 17:54:10][352516402312028][5889 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_acfcaeda-6fb6-4667-bcec-d3b687db2257","id":"QR_acfcaeda-6fb6-4667-bcec-d3b687db2257","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:54:11][352516402312028][6045 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-08-25 17:54:11][352516402312028][6045 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-08-25 17:54:11][352516402312028][6045 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:54:17][359400850061259][0 ms][INFO] === Request start === [2025-08-25 17:54:17][359400850061259][1 ms][DEBUG] START check_scloud [2025-08-25 17:54:17][359400850061259][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:54:17][359400850061259][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 5719 20899 24319796 161436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:54:17][359400850061259][309 ms][DEBUG] targetPkg: running [2025-08-25 17:54:17][359400850061259][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 17:54:17][359400850061259][309 ms][DEBUG] START check_boot_completed [2025-08-25 17:54:17][359400850061259][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:54:17][359400850061259][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:54:17][359400850061259][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:54:17][359400850061259][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:54:17][359400850061259][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:54:17][359400850061259][387 ms][DEBUG] START check_internet [2025-08-25 17:54:17][359400850061259][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:54:17][359400850061259][684 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.268/189.268/189.268/0.000 ms\n [2025-08-25 17:54:17][359400850061259][684 ms][DEBUG] check_internet: online [2025-08-25 17:54:17][359400850061259][684 ms][DEBUG] END check_internet in 297 ms [2025-08-25 17:54:17][359400850061259][684 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:54:17][359400850061259][684 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359400850061259\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4929\"}'\'' -e'"" [2025-08-25 17:54:17][359400850061259][684 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:54:17][359400850061259][685 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359400850061259\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4929\"}'\'' -e'"" [2025-08-25 17:54:24][359400850061259][6854 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6da43285-b529-45e0-a4f0-1b7d06fd19b3","id":"QR_6da43285-b529-45e0-a4f0-1b7d06fd19b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:54:24][359400850061259][7011 ms][DEBUG] proc_open done in 6326 ms; code=255; res.len=3343 [2025-08-25 17:54:24][359400850061259][7011 ms][DEBUG] END runCmdUntilRes#1 in 6326 ms [2025-08-25 17:54:24][359400850061259][7011 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:56:03][354747955427883][0 ms][INFO] === Request start === [2025-08-25 17:56:03][354747955427883][1 ms][DEBUG] START check_scloud [2025-08-25 17:56:03][354747955427883][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:56:03][354747955427883][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 5719 20899 24452020 173872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:56:03][354747955427883][321 ms][DEBUG] targetPkg: running [2025-08-25 17:56:03][354747955427883][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-25 17:56:03][354747955427883][321 ms][DEBUG] START check_boot_completed [2025-08-25 17:56:03][354747955427883][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:56:03][354747955427883][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:56:03][354747955427883][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:56:03][354747955427883][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:56:03][354747955427883][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:56:03][354747955427883][415 ms][DEBUG] START check_internet [2025-08-25 17:56:03][354747955427883][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:56:04][354747955427883][993 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.719/256.719/256.719/0.000 ms\n [2025-08-25 17:56:04][354747955427883][993 ms][DEBUG] check_internet: online [2025-08-25 17:56:04][354747955427883][993 ms][DEBUG] END check_internet in 578 ms [2025-08-25 17:56:04][354747955427883][993 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:56:04][354747955427883][993 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955427883\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5869\"}'\'' -e'"" [2025-08-25 17:56:04][354747955427883][993 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:56:04][354747955427883][993 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955427883\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5869\"}'\'' -e'"" [2025-08-25 17:56:08][354747955427883][5413 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_319c024a-9b8f-4bd3-a13a-744e4bb0a05b","id":"QR_319c024a-9b8f-4bd3-a13a-744e4bb0a05b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:56:08][354747955427883][5569 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-08-25 17:56:08][354747955427883][5569 ms][DEBUG] END runCmdUntilRes#1 in 4576 ms [2025-08-25 17:56:08][354747955427883][5569 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:56:11][352600227523686][1 ms][INFO] === Request start === [2025-08-25 17:56:11][352600227523686][1 ms][DEBUG] START check_scloud [2025-08-25 17:56:11][352600227523686][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:56:11][352600227523686][287 ms][DEBUG] SU: done in 285 ms; outu0_a118 5719 20899 24574012 184696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:56:11][352600227523686][287 ms][DEBUG] targetPkg: running [2025-08-25 17:56:11][352600227523686][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-25 17:56:11][352600227523686][287 ms][DEBUG] START check_boot_completed [2025-08-25 17:56:11][352600227523686][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:56:11][352600227523686][318 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:56:11][352600227523686][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:56:11][352600227523686][380 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 17:56:11][352600227523686][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:56:11][352600227523686][381 ms][DEBUG] START check_internet [2025-08-25 17:56:11][352600227523686][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:56:12][352600227523686][708 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.209/198.209/198.209/0.000 ms\n [2025-08-25 17:56:12][352600227523686][708 ms][DEBUG] check_internet: online [2025-08-25 17:56:12][352600227523686][708 ms][DEBUG] END check_internet in 328 ms [2025-08-25 17:56:12][352600227523686][708 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:56:12][352600227523686][708 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227523686\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5636\"}'\'' -e'"" [2025-08-25 17:56:12][352600227523686][708 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:56:12][352600227523686][708 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227523686\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5636\"}'\'' -e'"" [2025-08-25 17:56:15][352600227523686][4536 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e288f90-9bd7-4560-be41-31e9e233dbc1","id":"QR_5e288f90-9bd7-4560-be41-31e9e233dbc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:56:16][352600227523686][4692 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-25 17:56:16][352600227523686][4692 ms][DEBUG] END runCmdUntilRes#1 in 3984 ms [2025-08-25 17:56:16][352600227523686][4692 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:56:18][352075821354111][0 ms][INFO] === Request start === [2025-08-25 17:56:18][352075821354111][1 ms][DEBUG] START check_scloud [2025-08-25 17:56:18][352075821354111][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:56:18][352075821354111][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 5719 20899 24696004 195700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:56:18][352075821354111][312 ms][DEBUG] targetPkg: running [2025-08-25 17:56:18][352075821354111][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 17:56:18][352075821354111][312 ms][DEBUG] START check_boot_completed [2025-08-25 17:56:18][352075821354111][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:56:18][352075821354111][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:56:18][352075821354111][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:56:18][352075821354111][438 ms][DEBUG] SU: done in 79 ms; out [2025-08-25 17:56:18][352075821354111][438 ms][DEBUG] END check_boot_completed in 126 ms [2025-08-25 17:56:18][352075821354111][438 ms][DEBUG] START check_internet [2025-08-25 17:56:18][352075821354111][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:56:19][352075821354111][798 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.998/242.998/242.998/0.000 ms\n [2025-08-25 17:56:19][352075821354111][798 ms][DEBUG] check_internet: online [2025-08-25 17:56:19][352075821354111][798 ms][DEBUG] END check_internet in 360 ms [2025-08-25 17:56:19][352075821354111][798 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:56:19][352075821354111][798 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352075821354111\",\"model\":\"SM-G525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5119\"}'\'' -e'"" [2025-08-25 17:56:19][352075821354111][799 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:56:19][352075821354111][799 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352075821354111\",\"model\":\"SM-G525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5119\"}'\'' -e'"" [2025-08-25 17:56:23][352075821354111][4795 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0948dcdc-39c1-4963-a0c1-d7db791bedd5","id":"QR_0948dcdc-39c1-4963-a0c1-d7db791bedd5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:56:23][352075821354111][4951 ms][DEBUG] proc_open done in 4152 ms; code=255; res.len=3343 [2025-08-25 17:56:23][352075821354111][4951 ms][DEBUG] END runCmdUntilRes#1 in 4153 ms [2025-08-25 17:56:23][352075821354111][4951 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:56:25][358692300847839][0 ms][INFO] === Request start === [2025-08-25 17:56:25][358692300847839][1 ms][DEBUG] START check_scloud [2025-08-25 17:56:25][358692300847839][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:56:25][358692300847839][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 5719 20899 24857000 206740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:56:25][358692300847839][301 ms][DEBUG] targetPkg: running [2025-08-25 17:56:25][358692300847839][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-25 17:56:25][358692300847839][301 ms][DEBUG] START check_boot_completed [2025-08-25 17:56:25][358692300847839][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:56:25][358692300847839][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:56:25][358692300847839][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:56:25][358692300847839][426 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 17:56:25][358692300847839][426 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 17:56:25][358692300847839][426 ms][DEBUG] START check_internet [2025-08-25 17:56:25][358692300847839][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:56:26][358692300847839][769 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.137/225.137/225.137/0.000 ms\n [2025-08-25 17:56:26][358692300847839][770 ms][DEBUG] check_internet: online [2025-08-25 17:56:26][358692300847839][770 ms][DEBUG] END check_internet in 344 ms [2025-08-25 17:56:26][358692300847839][770 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:56:26][358692300847839][770 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358692300847839\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8525\"}'\'' -e'"" [2025-08-25 17:56:26][358692300847839][770 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:56:26][358692300847839][770 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358692300847839\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8525\"}'\'' -e'"" [2025-08-25 17:56:29][358692300847839][4518 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e36829ef-cb8d-4692-a028-750b90468e6b","id":"QR_e36829ef-cb8d-4692-a028-750b90468e6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:56:29][358692300847839][4675 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-25 17:56:29][358692300847839][4675 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 17:56:29][358692300847839][4675 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:56:31][355755470526757][0 ms][INFO] === Request start === [2025-08-25 17:56:31][355755470526757][1 ms][DEBUG] START check_scloud [2025-08-25 17:56:31][355755470526757][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:56:31][355755470526757][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 5719 20899 24974988 217644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:56:31][355755470526757][305 ms][DEBUG] targetPkg: running [2025-08-25 17:56:31][355755470526757][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 17:56:31][355755470526757][305 ms][DEBUG] START check_boot_completed [2025-08-25 17:56:31][355755470526757][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:56:31][355755470526757][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:56:31][355755470526757][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:56:31][355755470526757][399 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 17:56:31][355755470526757][399 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 17:56:31][355755470526757][400 ms][DEBUG] START check_internet [2025-08-25 17:56:31][355755470526757][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:56:31][355755470526757][648 ms][DEBUG] SU: done in 248 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.045/139.045/139.045/0.000 ms\n [2025-08-25 17:56:31][355755470526757][648 ms][DEBUG] check_internet: online [2025-08-25 17:56:31][355755470526757][648 ms][DEBUG] END check_internet in 249 ms [2025-08-25 17:56:31][355755470526757][648 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:56:31][355755470526757][648 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755470526757\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5754\"}'\'' -e'"" [2025-08-25 17:56:31][355755470526757][648 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:56:31][355755470526757][648 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755470526757\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5754\"}'\'' -e'"" [2025-08-25 17:56:35][355755470526757][4272 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_805c49b2-650e-4a6d-8f62-6311b9bdbee5","id":"QR_805c49b2-650e-4a6d-8f62-6311b9bdbee5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:56:35][355755470526757][4428 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-25 17:56:35][355755470526757][4428 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-25 17:56:35][355755470526757][4429 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:57:02][355647440812187][0 ms][INFO] === Request start === [2025-08-25 17:57:02][355647440812187][1 ms][DEBUG] START check_scloud [2025-08-25 17:57:02][355647440812187][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:57:02][355647440812187][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 5719 20899 25060136 229908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:57:02][355647440812187][311 ms][DEBUG] targetPkg: running [2025-08-25 17:57:02][355647440812187][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 17:57:02][355647440812187][311 ms][DEBUG] START check_boot_completed [2025-08-25 17:57:02][355647440812187][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:57:02][355647440812187][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:57:02][355647440812187][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:57:02][355647440812187][436 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 17:57:02][355647440812187][436 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 17:57:02][355647440812187][436 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:57:02][355647440812187][436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355647440812187\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3951\"}'\'' -e'"" [2025-08-25 17:57:02][355647440812187][436 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:57:02][355647440812187][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355647440812187\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3951\"}'\'' -e'"" [2025-08-25 17:57:06][355647440812187][4060 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc92cee7-5d14-4743-9c4e-c2a636cc752b","id":"QR_cc92cee7-5d14-4743-9c4e-c2a636cc752b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:57:06][355647440812187][4216 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-25 17:57:06][355647440812187][4216 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-25 17:57:06][355647440812187][4216 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:57:08][351240641322257][0 ms][INFO] === Request start === [2025-08-25 17:57:08][351240641322257][1 ms][DEBUG] START check_scloud [2025-08-25 17:57:08][351240641322257][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:57:08][351240641322257][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 5719 20899 25210024 241900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:57:08][351240641322257][311 ms][DEBUG] targetPkg: running [2025-08-25 17:57:08][351240641322257][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 17:57:08][351240641322257][311 ms][DEBUG] START check_boot_completed [2025-08-25 17:57:08][351240641322257][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:57:08][351240641322257][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:57:08][351240641322257][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:57:08][351240641322257][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:57:08][351240641322257][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:57:08][351240641322257][404 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:57:08][351240641322257][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641322257\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4306\"}'\'' -e'"" [2025-08-25 17:57:08][351240641322257][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:57:08][351240641322257][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641322257\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4306\"}'\'' -e'"" [2025-08-25 17:57:12][351240641322257][4075 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 17:57:12][351240641322257][4075 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-25 17:57:12][351240641322257][4075 ms][WARN] Detected error: Process with pid 5719 either refused to load frida-agent, or terminated during injection [2025-08-25 17:57:12][351240641322257][4075 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 17:57:12][351240641322257][4216 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 17:57:12][351240641322257][4216 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 17:57:12][351240641322257][4217 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 17:57:12][351240641322257][4341 ms][DEBUG] SU: done in 124 ms; out [2025-08-25 17:57:12][351240641322257][4341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 17:57:12][351240641322257][4529 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 17:57:14][351240641322257][6544 ms][DEBUG] START check_boot_completed [2025-08-25 17:57:14][351240641322257][6544 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:57:14][351240641322257][6591 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:57:14][351240641322257][6591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:57:14][351240641322257][6670 ms][DEBUG] SU: done in 79 ms; out [2025-08-25 17:57:14][351240641322257][6670 ms][DEBUG] END check_boot_completed in 127 ms [2025-08-25 17:57:17][351240641322257][9683 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 17:57:17][351240641322257][9684 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641322257\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4306\"}'\'' -e'"" [2025-08-25 17:57:21][351240641322257][13370 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:57:21][351240641322257][13526 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=107 [2025-08-25 17:57:21][351240641322257][13526 ms][DEBUG] END runCmdUntilRes#2 in 3843 ms [2025-08-25 17:57:21][351240641322257][13526 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:57:21][][0 ms][INFO] === Request start === [2025-08-25 17:57:21][][1 ms][DEBUG] START check_scloud [2025-08-25 17:57:21][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:57:22][][246 ms][DEBUG] SU: done in 246 ms; outu0_a118 7596 20899 24028700 124436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:57:22][][246 ms][DEBUG] targetPkg: running [2025-08-25 17:57:22][][247 ms][DEBUG] END check_scloud in 246 ms [2025-08-25 17:57:22][][247 ms][DEBUG] START check_boot_completed [2025-08-25 17:57:22][][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:57:22][][293 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:57:22][][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:57:22][][387 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 17:57:22][][387 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 17:57:22][][387 ms][DEBUG] rawBody.length=1129 [2025-08-25 17:57:22][][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W907BXWF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6094\"}'\'' -e'"" [2025-08-25 17:57:22][][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:57:22][][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W907BXWF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6094\"}'\'' -e'"" [2025-08-25 17:57:25][][3542 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:57:25][][3699 ms][DEBUG] proc_open done in 3311 ms; code=255; res.len=107 [2025-08-25 17:57:25][][3699 ms][DEBUG] END runCmdUntilRes#1 in 3311 ms [2025-08-25 17:57:25][][3699 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:57:26][352854661447338][0 ms][INFO] === Request start === [2025-08-25 17:57:26][352854661447338][1 ms][DEBUG] START check_scloud [2025-08-25 17:57:26][352854661447338][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:57:26][352854661447338][253 ms][DEBUG] SU: done in 253 ms; outu0_a118 7596 20899 24206180 135836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:57:26][352854661447338][253 ms][DEBUG] targetPkg: running [2025-08-25 17:57:26][352854661447338][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-25 17:57:26][352854661447338][254 ms][DEBUG] START check_boot_completed [2025-08-25 17:57:26][352854661447338][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:57:26][352854661447338][300 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:57:26][352854661447338][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:57:26][352854661447338][363 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:57:26][352854661447338][363 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 17:57:26][352854661447338][363 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:57:26][352854661447338][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352854661447338\",\"model\":\"SM-S901N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2087\"}'\'' -e'"" [2025-08-25 17:57:26][352854661447338][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:57:26][352854661447338][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352854661447338\",\"model\":\"SM-S901N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2087\"}'\'' -e'"" [2025-08-25 17:57:30][352854661447338][3924 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0b2a440-23e6-4423-a1e5-421dda0d0e0d","id":"QR_f0b2a440-23e6-4423-a1e5-421dda0d0e0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:57:30][352854661447338][4081 ms][DEBUG] proc_open done in 3718 ms; code=255; res.len=3343 [2025-08-25 17:57:30][352854661447338][4081 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-08-25 17:57:30][352854661447338][4081 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:57:32][353818875507509][0 ms][INFO] === Request start === [2025-08-25 17:57:32][353818875507509][1 ms][DEBUG] START check_scloud [2025-08-25 17:57:32][353818875507509][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:57:33][353818875507509][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 7596 20899 24390648 149368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:57:33][353818875507509][282 ms][DEBUG] targetPkg: running [2025-08-25 17:57:33][353818875507509][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-25 17:57:33][353818875507509][283 ms][DEBUG] START check_boot_completed [2025-08-25 17:57:33][353818875507509][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:57:33][353818875507509][329 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:57:33][353818875507509][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:57:33][353818875507509][375 ms][DEBUG] SU: done in 46 ms; out [2025-08-25 17:57:33][353818875507509][375 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:57:33][353818875507509][376 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:57:33][353818875507509][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818875507509\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4348\"}'\'' -e'"" [2025-08-25 17:57:33][353818875507509][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:57:33][353818875507509][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818875507509\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4348\"}'\'' -e'"" [2025-08-25 17:57:36][353818875507509][3672 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 17:57:36][353818875507509][3828 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=115 [2025-08-25 17:57:36][353818875507509][3828 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-08-25 17:57:36][353818875507509][3828 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 17:57:36][][0 ms][INFO] === Request start === [2025-08-25 17:57:36][][1 ms][DEBUG] START check_scloud [2025-08-25 17:57:36][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:57:37][][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 7596 20899 24532956 160176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:57:37][][241 ms][DEBUG] targetPkg: running [2025-08-25 17:57:37][][241 ms][DEBUG] END check_scloud in 240 ms [2025-08-25 17:57:37][][241 ms][DEBUG] START check_boot_completed [2025-08-25 17:57:37][][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:57:37][][287 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:57:37][][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:57:37][][335 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 17:57:37][][335 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 17:57:37][][335 ms][DEBUG] rawBody.length=1129 [2025-08-25 17:57:37][][335 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXA0KMZMJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9666\"}'\'' -e'"" [2025-08-25 17:57:37][][336 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:57:37][][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXA0KMZMJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9666\"}'\'' -e'"" [2025-08-25 17:57:40][][3536 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 17:57:40][][3693 ms][DEBUG] proc_open done in 3357 ms; code=255; res.len=107 [2025-08-25 17:57:40][][3693 ms][DEBUG] END runCmdUntilRes#1 in 3357 ms [2025-08-25 17:57:40][][3693 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 17:57:42][353818875507509][0 ms][INFO] === Request start === [2025-08-25 17:57:42][353818875507509][1 ms][DEBUG] START check_scloud [2025-08-25 17:57:42][353818875507509][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:57:42][353818875507509][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 7596 20899 24650944 172064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:57:42][353818875507509][267 ms][DEBUG] targetPkg: running [2025-08-25 17:57:42][353818875507509][267 ms][DEBUG] END check_scloud in 267 ms [2025-08-25 17:57:42][353818875507509][267 ms][DEBUG] START check_boot_completed [2025-08-25 17:57:42][353818875507509][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:57:42][353818875507509][314 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:57:42][353818875507509][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:57:42][353818875507509][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:57:42][353818875507509][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:57:42][353818875507509][361 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:57:42][353818875507509][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818875507509\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2587\"}'\'' -e'"" [2025-08-25 17:57:42][353818875507509][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:57:42][353818875507509][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818875507509\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2587\"}'\'' -e'"" [2025-08-25 17:57:47][353818875507509][5344 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9f4e7ec-6313-4076-892b-335c19d393e1","id":"QR_b9f4e7ec-6313-4076-892b-335c19d393e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:57:48][353818875507509][5500 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-08-25 17:57:48][353818875507509][5500 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-08-25 17:57:48][353818875507509][5500 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:58:03][354068191093706][0 ms][INFO] === Request start === [2025-08-25 17:58:03][354068191093706][1 ms][DEBUG] START check_scloud [2025-08-25 17:58:03][354068191093706][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:58:04][354068191093706][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 7596 20899 24668168 183404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:58:04][354068191093706][307 ms][DEBUG] targetPkg: running [2025-08-25 17:58:04][354068191093706][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 17:58:04][354068191093706][307 ms][DEBUG] START check_boot_completed [2025-08-25 17:58:04][354068191093706][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:58:04][354068191093706][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:58:04][354068191093706][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:58:04][354068191093706][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:58:04][354068191093706][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 17:58:04][354068191093706][400 ms][DEBUG] START check_internet [2025-08-25 17:58:04][354068191093706][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:58:04][354068191093706][728 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.066/218.066/218.066/0.000 ms\n [2025-08-25 17:58:04][354068191093706][728 ms][DEBUG] check_internet: online [2025-08-25 17:58:04][354068191093706][728 ms][DEBUG] END check_internet in 328 ms [2025-08-25 17:58:04][354068191093706][728 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:58:04][354068191093706][729 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191093706\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6350\"}'\'' -e'"" [2025-08-25 17:58:04][354068191093706][729 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:58:04][354068191093706][729 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191093706\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6350\"}'\'' -e'"" [2025-08-25 17:58:08][354068191093706][4430 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2f520fb-e67a-48bc-9cb2-895ca53a5594","id":"QR_a2f520fb-e67a-48bc-9cb2-895ca53a5594","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:58:08][354068191093706][4587 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-25 17:58:08][354068191093706][4587 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 17:58:08][354068191093706][4587 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:58:09][352502216509611][0 ms][INFO] === Request start === [2025-08-25 17:58:09][352502216509611][1 ms][DEBUG] START check_scloud [2025-08-25 17:58:09][352502216509611][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:58:10][352502216509611][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 7596 20899 24849552 195008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:58:10][352502216509611][287 ms][DEBUG] targetPkg: running [2025-08-25 17:58:10][352502216509611][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-25 17:58:10][352502216509611][287 ms][DEBUG] START check_boot_completed [2025-08-25 17:58:10][352502216509611][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:58:10][352502216509611][332 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 17:58:10][352502216509611][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:58:10][352502216509611][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:58:10][352502216509611][379 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 17:58:10][352502216509611][380 ms][DEBUG] START check_internet [2025-08-25 17:58:10][352502216509611][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:58:10][352502216509611][661 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.473/153.473/153.473/0.000 ms\n [2025-08-25 17:58:10][352502216509611][661 ms][DEBUG] check_internet: online [2025-08-25 17:58:10][352502216509611][661 ms][DEBUG] END check_internet in 281 ms [2025-08-25 17:58:10][352502216509611][661 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:58:10][352502216509611][661 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502216509611\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5298\"}'\'' -e'"" [2025-08-25 17:58:10][352502216509611][661 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:58:10][352502216509611][661 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502216509611\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5298\"}'\'' -e'"" [2025-08-25 17:58:14][352502216509611][4316 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69d70051-ae7b-4bbd-92ce-37b958f9b5ce","id":"QR_69d70051-ae7b-4bbd-92ce-37b958f9b5ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:58:14][352502216509611][4472 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-25 17:58:14][352502216509611][4472 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-25 17:58:14][352502216509611][4472 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:58:17][350680831041814][0 ms][INFO] === Request start === [2025-08-25 17:58:17][350680831041814][0 ms][DEBUG] START check_scloud [2025-08-25 17:58:17][350680831041814][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:58:18][350680831041814][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 7596 20899 24995992 205420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:58:18][350680831041814][302 ms][DEBUG] targetPkg: running [2025-08-25 17:58:18][350680831041814][302 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 17:58:18][350680831041814][302 ms][DEBUG] START check_boot_completed [2025-08-25 17:58:18][350680831041814][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:58:18][350680831041814][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:58:18][350680831041814][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:58:18][350680831041814][396 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 17:58:18][350680831041814][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:58:18][350680831041814][396 ms][DEBUG] START check_internet [2025-08-25 17:58:18][350680831041814][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 17:58:18][350680831041814][692 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=177 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 177.569/177.569/177.569/0.000 ms\n [2025-08-25 17:58:18][350680831041814][692 ms][DEBUG] check_internet: online [2025-08-25 17:58:18][350680831041814][692 ms][DEBUG] END check_internet in 296 ms [2025-08-25 17:58:18][350680831041814][693 ms][DEBUG] rawBody.length=1149 [2025-08-25 17:58:18][350680831041814][693 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350680831041814\",\"model\":\"SM-N981U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4942\"}'\'' -e'"" [2025-08-25 17:58:18][350680831041814][693 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:58:18][350680831041814][693 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350680831041814\",\"model\":\"SM-N981U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4942\"}'\'' -e'"" [2025-08-25 17:58:24][350680831041814][6769 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff5d77b7-2be6-410a-8eb0-e3bbd08f17b0","id":"QR_ff5d77b7-2be6-410a-8eb0-e3bbd08f17b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:58:24][350680831041814][6925 ms][DEBUG] proc_open done in 6231 ms; code=255; res.len=3343 [2025-08-25 17:58:24][350680831041814][6925 ms][DEBUG] END runCmdUntilRes#1 in 6232 ms [2025-08-25 17:58:24][350680831041814][6925 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:59:02][352590520917604][0 ms][INFO] === Request start === [2025-08-25 17:59:02][352590520917604][1 ms][DEBUG] START check_scloud [2025-08-25 17:59:02][352590520917604][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:59:02][352590520917604][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 7596 20899 25082220 217704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:59:02][352590520917604][292 ms][DEBUG] targetPkg: running [2025-08-25 17:59:02][352590520917604][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-25 17:59:02][352590520917604][292 ms][DEBUG] START check_boot_completed [2025-08-25 17:59:02][352590520917604][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:59:02][352590520917604][338 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:59:02][352590520917604][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:59:02][352590520917604][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:59:02][352590520917604][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 17:59:02][352590520917604][386 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:59:02][352590520917604][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590520917604\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7514\"}'\'' -e'"" [2025-08-25 17:59:02][352590520917604][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:59:02][352590520917604][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590520917604\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7514\"}'\'' -e'"" [2025-08-25 17:59:07][352590520917604][4494 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8aa4fff-2a1a-43fa-9d69-05bdc5be8a3d","id":"QR_c8aa4fff-2a1a-43fa-9d69-05bdc5be8a3d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:59:07][352590520917604][4650 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 17:59:07][352590520917604][4650 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 17:59:07][352590520917604][4650 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:59:08][352384571655374][0 ms][INFO] === Request start === [2025-08-25 17:59:08][352384571655374][1 ms][DEBUG] START check_scloud [2025-08-25 17:59:08][352384571655374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:59:08][352384571655374][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 7596 20899 25253364 228300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:59:08][352384571655374][312 ms][DEBUG] targetPkg: running [2025-08-25 17:59:08][352384571655374][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 17:59:08][352384571655374][312 ms][DEBUG] START check_boot_completed [2025-08-25 17:59:08][352384571655374][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:59:08][352384571655374][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 17:59:08][352384571655374][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:59:08][352384571655374][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 17:59:08][352384571655374][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 17:59:08][352384571655374][390 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:59:08][352384571655374][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384571655374\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3089\"}'\'' -e'"" [2025-08-25 17:59:08][352384571655374][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:59:08][352384571655374][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384571655374\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3089\"}'\'' -e'"" [2025-08-25 17:59:12][352384571655374][3998 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e02694c9-b42f-43ee-87b2-ab788e6d1a82","id":"QR_e02694c9-b42f-43ee-87b2-ab788e6d1a82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 17:59:12][352384571655374][4154 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=3343 [2025-08-25 17:59:12][352384571655374][4154 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-08-25 17:59:12][352384571655374][4154 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 17:59:14][350290812097049][0 ms][INFO] === Request start === [2025-08-25 17:59:14][350290812097049][1 ms][DEBUG] START check_scloud [2025-08-25 17:59:14][350290812097049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 17:59:14][350290812097049][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 7596 20899 25360944 240380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 17:59:14][350290812097049][312 ms][DEBUG] targetPkg: running [2025-08-25 17:59:14][350290812097049][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 17:59:14][350290812097049][312 ms][DEBUG] START check_boot_completed [2025-08-25 17:59:14][350290812097049][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:59:14][350290812097049][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 17:59:14][350290812097049][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:59:14][350290812097049][407 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 17:59:14][350290812097049][407 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 17:59:14][350290812097049][407 ms][DEBUG] rawBody.length=1148 [2025-08-25 17:59:14][350290812097049][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812097049\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5713\"}'\'' -e'"" [2025-08-25 17:59:14][350290812097049][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 17:59:14][350290812097049][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812097049\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5713\"}'\'' -e'"" [2025-08-25 17:59:22][350290812097049][8091 ms][DEBUG] proc_open done in 7683 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 17:59:22][350290812097049][8091 ms][DEBUG] END runCmdUntilRes#1 in 7684 ms [2025-08-25 17:59:22][350290812097049][8091 ms][WARN] Detected error: Process with pid 7596 either refused to load frida-agent, or terminated during injection [2025-08-25 17:59:22][350290812097049][8091 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 17:59:22][350290812097049][8278 ms][DEBUG] SU: done in 187 ms; out [2025-08-25 17:59:22][350290812097049][8279 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 17:59:22][350290812097049][8279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 17:59:22][350290812097049][8607 ms][DEBUG] SU: done in 328 ms; out [2025-08-25 17:59:22][350290812097049][8607 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 17:59:23][350290812097049][9060 ms][DEBUG] SU: done in 453 ms; out [2025-08-25 17:59:25][350290812097049][11075 ms][DEBUG] START check_boot_completed [2025-08-25 17:59:25][350290812097049][11075 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 17:59:25][350290812097049][11122 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 17:59:25][350290812097049][11122 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 17:59:25][350290812097049][11184 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 17:59:25][350290812097049][11184 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 17:59:28][350290812097049][14199 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 17:59:28][350290812097049][14199 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812097049\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5713\"}'\'' -e'"" [2025-08-25 17:59:29][350290812097049][15636 ms][DEBUG] proc_open done in 1437 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-25 17:59:29][350290812097049][15636 ms][DEBUG] END runCmdUntilRes#2 in 1438 ms [2025-08-25 17:59:29][350290812097049][15636 ms][WARN] Detected error 2; Reboot the device [2025-08-25 17:59:29][350290812097049][15636 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 17:59:30][350290812097049][16261 ms][DEBUG] SU: done in 624 ms; out [2025-08-25 18:00:03][350290812097049][0 ms][INFO] === Request start === [2025-08-25 18:00:03][350290812097049][1 ms][DEBUG] START check_scloud [2025-08-25 18:00:03][350290812097049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:00:03][350290812097049][45 ms][DEBUG] SU: done in 44 ms; out [2025-08-25 18:00:03][350290812097049][45 ms][WARN] targetPkg: not running, restarting [2025-08-25 18:00:03][350290812097049][45 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 18:00:03][350290812097049][76 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 18:00:03][350290812097049][77 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 18:00:03][350290812097049][107 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 18:00:05][350290812097049][2123 ms][DEBUG] END check_scloud in 2122 ms [2025-08-25 18:00:05][350290812097049][2123 ms][DEBUG] START check_boot_completed [2025-08-25 18:00:05][350290812097049][2123 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:00:30][350290812097049][26528 ms][DEBUG] ADB: done in 24404 ms; out [2025-08-25 18:00:30][350290812097049][26528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:00:30][350290812097049][26590 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:00:30][350290812097049][26590 ms][DEBUG] END check_boot_completed in 24467 ms [2025-08-25 18:00:30][350290812097049][26590 ms][DEBUG] START check_internet [2025-08-25 18:00:30][350290812097049][26590 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:00:30][350290812097049][26778 ms][DEBUG] SU: done in 188 ms; out [2025-08-25 18:00:30][350290812097049][26778 ms][WARN] check_internet: offline [2025-08-25 18:00:30][350290812097049][26778 ms][DEBUG] END check_internet in 188 ms [2025-08-25 18:00:33][351007339945016][1 ms][INFO] === Request start === [2025-08-25 18:00:33][351007339945016][1 ms][DEBUG] START check_scloud [2025-08-25 18:00:33][351007339945016][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:00:33][351007339945016][268 ms][DEBUG] SU: done in 267 ms; out [2025-08-25 18:00:33][351007339945016][268 ms][WARN] targetPkg: not running, restarting [2025-08-25 18:00:33][351007339945016][268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 18:00:33][351007339945016][394 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 18:00:33][351007339945016][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 18:00:33][351007339945016][565 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 18:00:35][351007339945016][2567 ms][DEBUG] END check_scloud in 2566 ms [2025-08-25 18:00:35][351007339945016][2567 ms][DEBUG] START check_boot_completed [2025-08-25 18:00:35][351007339945016][2567 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:00:37][351007339945016][3629 ms][DEBUG] ADB: done in 1062 ms; out [2025-08-25 18:00:37][351007339945016][3629 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:00:37][351007339945016][3692 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:00:37][351007339945016][3692 ms][DEBUG] END check_boot_completed in 1125 ms [2025-08-25 18:00:37][351007339945016][3692 ms][DEBUG] START check_internet [2025-08-25 18:00:37][351007339945016][3692 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:00:37][351007339945016][3801 ms][DEBUG] SU: done in 109 ms; out [2025-08-25 18:00:37][351007339945016][3801 ms][WARN] check_internet: offline [2025-08-25 18:00:37][351007339945016][3801 ms][DEBUG] END check_internet in 109 ms [2025-08-25 18:01:02][350290812097049][0 ms][INFO] === Request start === [2025-08-25 18:01:02][350290812097049][1 ms][DEBUG] START check_scloud [2025-08-25 18:01:02][350290812097049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:01:02][350290812097049][358 ms][DEBUG] SU: done in 358 ms; out [2025-08-25 18:01:02][350290812097049][358 ms][WARN] targetPkg: not running, restarting [2025-08-25 18:01:02][350290812097049][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 18:01:02][350290812097049][500 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 18:01:02][350290812097049][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 18:01:03][350290812097049][702 ms][DEBUG] SU: done in 202 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 18:01:05][350290812097049][2717 ms][DEBUG] END check_scloud in 2716 ms [2025-08-25 18:01:05][350290812097049][2717 ms][DEBUG] START check_boot_completed [2025-08-25 18:01:05][350290812097049][2717 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:01:05][350290812097049][2764 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:01:05][350290812097049][2764 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:01:05][350290812097049][2827 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 18:01:05][350290812097049][2827 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 18:01:05][350290812097049][2827 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:01:05][350290812097049][2827 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812097049\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5630\"}'\'' -e'"" [2025-08-25 18:01:05][350290812097049][2827 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:01:05][350290812097049][2827 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812097049\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5630\"}'\'' -e'"" [2025-08-25 18:01:10][350290812097049][8528 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:01:11][350290812097049][8684 ms][DEBUG] proc_open done in 5857 ms; code=255; res.len=107 [2025-08-25 18:01:11][350290812097049][8684 ms][DEBUG] END runCmdUntilRes#1 in 5858 ms [2025-08-25 18:01:11][350290812097049][8684 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:01:11][][0 ms][INFO] === Request start === [2025-08-25 18:01:11][][1 ms][DEBUG] START check_scloud [2025-08-25 18:01:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:01:11][][366 ms][DEBUG] SU: done in 365 ms; outu0_a118 10898 5018 24009980 122032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:01:11][][366 ms][DEBUG] targetPkg: running [2025-08-25 18:01:11][][366 ms][DEBUG] END check_scloud in 365 ms [2025-08-25 18:01:11][][366 ms][DEBUG] START check_boot_completed [2025-08-25 18:01:11][][366 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:01:11][][412 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:01:11][][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:01:11][][459 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:01:11][][459 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:01:11][][459 ms][DEBUG] rawBody.length=1129 [2025-08-25 18:01:11][][459 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX40D16AR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9860\"}'\'' -e'"" [2025-08-25 18:01:11][][459 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:01:11][][459 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX40D16AR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9860\"}'\'' -e'"" [2025-08-25 18:01:17][][5598 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:01:17][][5755 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=107 [2025-08-25 18:01:17][][5755 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-08-25 18:01:17][][5755 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:01:17][351007339945016][0 ms][INFO] === Request start === [2025-08-25 18:01:17][351007339945016][1 ms][DEBUG] START check_scloud [2025-08-25 18:01:17][351007339945016][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:01:18][351007339945016][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 10898 5018 24148164 116588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:01:18][351007339945016][326 ms][DEBUG] targetPkg: running [2025-08-25 18:01:18][351007339945016][326 ms][DEBUG] END check_scloud in 325 ms [2025-08-25 18:01:18][351007339945016][326 ms][DEBUG] START check_boot_completed [2025-08-25 18:01:18][351007339945016][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:01:18][351007339945016][357 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:01:18][351007339945016][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:01:18][351007339945016][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:01:18][351007339945016][404 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:01:18][351007339945016][404 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:01:18][351007339945016][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007339945016\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4617\"}'\'' -e'"" [2025-08-25 18:01:18][351007339945016][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:01:18][351007339945016][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007339945016\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4617\"}'\'' -e'"" [2025-08-25 18:01:22][351007339945016][5044 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:01:23][351007339945016][5200 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=107 [2025-08-25 18:01:23][351007339945016][5200 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-08-25 18:01:23][351007339945016][5200 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:01:23][][0 ms][INFO] === Request start === [2025-08-25 18:01:23][][1 ms][DEBUG] START check_scloud [2025-08-25 18:01:23][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:01:23][][352 ms][DEBUG] SU: done in 351 ms; outu0_a118 10898 5018 24287704 103292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:01:23][][352 ms][DEBUG] targetPkg: running [2025-08-25 18:01:23][][352 ms][DEBUG] END check_scloud in 351 ms [2025-08-25 18:01:23][][352 ms][DEBUG] START check_boot_completed [2025-08-25 18:01:23][][352 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:01:23][][383 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:01:23][][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:01:23][][446 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 18:01:23][][446 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 18:01:23][][446 ms][DEBUG] rawBody.length=1129 [2025-08-25 18:01:23][][446 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXC0XPZ6V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8826\"}'\'' -e'"" [2025-08-25 18:01:23][][446 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:01:23][][446 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXC0XPZ6V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8826\"}'\'' -e'"" [2025-08-25 18:01:27][][4273 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:01:27][][4429 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=107 [2025-08-25 18:01:27][][4429 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 18:01:27][][4429 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:01:28][352961654065355][0 ms][INFO] === Request start === [2025-08-25 18:01:28][352961654065355][1 ms][DEBUG] START check_scloud [2025-08-25 18:01:28][352961654065355][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:01:28][352961654065355][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 10898 5018 24452796 105876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:01:28][352961654065355][299 ms][DEBUG] targetPkg: running [2025-08-25 18:01:28][352961654065355][299 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 18:01:28][352961654065355][299 ms][DEBUG] START check_boot_completed [2025-08-25 18:01:28][352961654065355][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:01:28][352961654065355][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:01:28][352961654065355][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:01:29][352961654065355][408 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 18:01:29][352961654065355][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:01:29][352961654065355][409 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:01:29][352961654065355][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352961654065355\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3894\"}'\'' -e'"" [2025-08-25 18:01:29][352961654065355][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:01:29][352961654065355][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352961654065355\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3894\"}'\'' -e'"" [2025-08-25 18:01:32][352961654065355][3939 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:01:32][352961654065355][4095 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=107 [2025-08-25 18:01:32][352961654065355][4095 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-25 18:01:32][352961654065355][4095 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:01:33][][0 ms][INFO] === Request start === [2025-08-25 18:01:33][][1 ms][DEBUG] START check_scloud [2025-08-25 18:01:33][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:01:33][][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 10898 5018 24556448 112508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:01:33][][299 ms][DEBUG] targetPkg: running [2025-08-25 18:01:33][][299 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 18:01:33][][299 ms][DEBUG] START check_boot_completed [2025-08-25 18:01:33][][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:01:33][][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:01:33][][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:01:33][][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:01:33][][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:01:33][][377 ms][DEBUG] rawBody.length=1129 [2025-08-25 18:01:33][][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCTA0XQXCJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1333\"}'\'' -e'"" [2025-08-25 18:01:33][][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:01:33][][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCTA0XQXCJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1333\"}'\'' -e'"" [2025-08-25 18:01:37][][4158 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:01:37][][4314 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=107 [2025-08-25 18:01:37][][4314 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-25 18:01:37][][4314 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:02:02][352600225645150][0 ms][INFO] === Request start === [2025-08-25 18:02:02][352600225645150][1 ms][DEBUG] START check_scloud [2025-08-25 18:02:02][352600225645150][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:02:02][352600225645150][354 ms][DEBUG] SU: done in 353 ms; outu0_a118 10898 5018 24549096 71784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:02:02][352600225645150][354 ms][DEBUG] targetPkg: running [2025-08-25 18:02:02][352600225645150][354 ms][DEBUG] END check_scloud in 353 ms [2025-08-25 18:02:02][352600225645150][354 ms][DEBUG] START check_boot_completed [2025-08-25 18:02:02][352600225645150][354 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:02:02][352600225645150][385 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:02:02][352600225645150][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:02:02][352600225645150][432 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:02:02][352600225645150][433 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:02:02][352600225645150][433 ms][DEBUG] START check_internet [2025-08-25 18:02:02][352600225645150][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:02:03][352600225645150][948 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.187/199.187/199.187/0.000 ms\n [2025-08-25 18:02:03][352600225645150][948 ms][DEBUG] check_internet: online [2025-08-25 18:02:03][352600225645150][948 ms][DEBUG] END check_internet in 516 ms [2025-08-25 18:02:03][352600225645150][948 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:02:03][352600225645150][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600225645150\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8088\"}'\'' -e'"" [2025-08-25 18:02:03][352600225645150][949 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:02:03][352600225645150][949 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600225645150\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8088\"}'\'' -e'"" [2025-08-25 18:02:07][352600225645150][5650 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74250bf2-f80e-4064-a62c-b1aec7e3a043","id":"QR_74250bf2-f80e-4064-a62c-b1aec7e3a043","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:02:08][352600225645150][5806 ms][DEBUG] proc_open done in 4857 ms; code=255; res.len=3343 [2025-08-25 18:02:08][352600225645150][5806 ms][DEBUG] END runCmdUntilRes#1 in 4857 ms [2025-08-25 18:02:08][352600225645150][5806 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:02:09][353881489514808][0 ms][INFO] === Request start === [2025-08-25 18:02:09][353881489514808][1 ms][DEBUG] START check_scloud [2025-08-25 18:02:09][353881489514808][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:02:09][353881489514808][328 ms][DEBUG] SU: done in 328 ms; outu0_a118 10898 5018 24690468 85596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:02:09][353881489514808][329 ms][DEBUG] targetPkg: running [2025-08-25 18:02:09][353881489514808][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-25 18:02:09][353881489514808][329 ms][DEBUG] START check_boot_completed [2025-08-25 18:02:09][353881489514808][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:02:09][353881489514808][375 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:02:09][353881489514808][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:02:09][353881489514808][422 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:02:09][353881489514808][422 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:02:09][353881489514808][422 ms][DEBUG] START check_internet [2025-08-25 18:02:09][353881489514808][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:02:10][353881489514808][750 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=213 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 213.394/213.394/213.394/0.000 ms\n [2025-08-25 18:02:10][353881489514808][750 ms][DEBUG] check_internet: online [2025-08-25 18:02:10][353881489514808][750 ms][DEBUG] END check_internet in 328 ms [2025-08-25 18:02:10][353881489514808][750 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:02:10][353881489514808][750 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4647\"}'\'' -e'"" [2025-08-25 18:02:10][353881489514808][751 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:02:10][353881489514808][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4647\"}'\'' -e'"" [2025-08-25 18:02:14][353881489514808][4905 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:02:14][353881489514808][5061 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=107 [2025-08-25 18:02:14][353881489514808][5061 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-25 18:02:14][353881489514808][5062 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:02:14][][0 ms][INFO] === Request start === [2025-08-25 18:02:14][][1 ms][DEBUG] START check_scloud [2025-08-25 18:02:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:02:15][][328 ms][DEBUG] SU: done in 328 ms; outu0_a118 10898 5018 24824876 102120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:02:15][][328 ms][DEBUG] targetPkg: running [2025-08-25 18:02:15][][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-25 18:02:15][][329 ms][DEBUG] START check_boot_completed [2025-08-25 18:02:15][][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:02:15][][375 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:02:15][][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:02:15][][422 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:02:15][][422 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 18:02:15][][422 ms][DEBUG] START check_internet [2025-08-25 18:02:15][][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:02:15][][672 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.376/146.376/146.376/0.000 ms\n [2025-08-25 18:02:15][][672 ms][DEBUG] check_internet: online [2025-08-25 18:02:15][][672 ms][DEBUG] END check_internet in 250 ms [2025-08-25 18:02:15][][672 ms][DEBUG] rawBody.length=1129 [2025-08-25 18:02:15][][672 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCTB1Q6CCA\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5900\"}'\'' -e'"" [2025-08-25 18:02:15][][672 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:02:15][][672 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCTB1Q6CCA\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5900\"}'\'' -e'"" [2025-08-25 18:02:19][][4109 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:02:19][][4265 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=107 [2025-08-25 18:02:19][][4265 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-08-25 18:02:19][][4265 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:03:05][350197384348249][1 ms][INFO] === Request start === [2025-08-25 18:03:05][350197384348249][1 ms][DEBUG] START check_scloud [2025-08-25 18:03:05][350197384348249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:03:05][350197384348249][263 ms][DEBUG] SU: done in 261 ms; outu0_a118 10898 5018 24950984 115648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:03:05][350197384348249][263 ms][DEBUG] targetPkg: running [2025-08-25 18:03:05][350197384348249][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-25 18:03:05][350197384348249][263 ms][DEBUG] START check_boot_completed [2025-08-25 18:03:05][350197384348249][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:03:05][350197384348249][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:03:05][350197384348249][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:03:05][350197384348249][372 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:03:05][350197384348249][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:03:05][350197384348249][372 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:03:05][350197384348249][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350197384348249\",\"model\":\"SM-S711W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4651\"}'\'' -e'"" [2025-08-25 18:03:05][350197384348249][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:03:05][350197384348249][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350197384348249\",\"model\":\"SM-S711W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4651\"}'\'' -e'"" [2025-08-25 18:03:11][350197384348249][6105 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09bf5f66-d1fe-4e75-b581-395200348507","id":"QR_09bf5f66-d1fe-4e75-b581-395200348507","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:03:11][350197384348249][6261 ms][DEBUG] proc_open done in 5889 ms; code=255; res.len=3343 [2025-08-25 18:03:11][350197384348249][6261 ms][DEBUG] END runCmdUntilRes#1 in 5889 ms [2025-08-25 18:03:11][350197384348249][6261 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:04:04][352467924042513][0 ms][INFO] === Request start === [2025-08-25 18:04:04][352467924042513][1 ms][DEBUG] START check_scloud [2025-08-25 18:04:04][352467924042513][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:04:04][352467924042513][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 10898 5018 25081260 127080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:04:04][352467924042513][307 ms][DEBUG] targetPkg: running [2025-08-25 18:04:04][352467924042513][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 18:04:04][352467924042513][307 ms][DEBUG] START check_boot_completed [2025-08-25 18:04:04][352467924042513][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:04:04][352467924042513][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:04:04][352467924042513][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:04:05][352467924042513][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:04:05][352467924042513][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:04:05][352467924042513][416 ms][DEBUG] START check_internet [2025-08-25 18:04:05][352467924042513][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:04:05][352467924042513][729 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.784/196.784/196.784/0.000 ms\n [2025-08-25 18:04:05][352467924042513][729 ms][DEBUG] check_internet: online [2025-08-25 18:04:05][352467924042513][729 ms][DEBUG] END check_internet in 313 ms [2025-08-25 18:04:05][352467924042513][729 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:04:05][352467924042513][729 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467924042513\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3436\"}'\'' -e'"" [2025-08-25 18:04:05][352467924042513][729 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:04:05][352467924042513][729 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467924042513\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3436\"}'\'' -e'"" [2025-08-25 18:04:10][352467924042513][6290 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_292b45ea-5186-4dac-a2f6-b0d7b7edafcd","id":"QR_292b45ea-5186-4dac-a2f6-b0d7b7edafcd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:04:11][352467924042513][6446 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-08-25 18:04:11][352467924042513][6446 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-25 18:04:11][352467924042513][6446 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:05:04][356722915627615][0 ms][INFO] === Request start === [2025-08-25 18:05:04][356722915627615][1 ms][DEBUG] START check_scloud [2025-08-25 18:05:04][356722915627615][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:05:04][356722915627615][345 ms][DEBUG] SU: done in 345 ms; outu0_a118 10898 5018 25202324 136940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:05:04][356722915627615][346 ms][DEBUG] targetPkg: running [2025-08-25 18:05:04][356722915627615][346 ms][DEBUG] END check_scloud in 345 ms [2025-08-25 18:05:04][356722915627615][346 ms][DEBUG] START check_boot_completed [2025-08-25 18:05:04][356722915627615][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:05:04][356722915627615][392 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:05:04][356722915627615][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:05:04][356722915627615][439 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:05:04][356722915627615][439 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:05:04][356722915627615][439 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:05:04][356722915627615][439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722915627615\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9500\"}'\'' -e'"" [2025-08-25 18:05:04][356722915627615][439 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:05:04][356722915627615][439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722915627615\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9500\"}'\'' -e'"" [2025-08-25 18:05:09][356722915627615][4969 ms][DEBUG] proc_open done in 4530 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 18:05:09][356722915627615][4969 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-25 18:05:09][356722915627615][4969 ms][WARN] Detected error: Process with pid 10898 either refused to load frida-agent, or terminated during injection [2025-08-25 18:05:09][356722915627615][4969 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 18:05:09][356722915627615][5125 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 18:05:09][356722915627615][5125 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 18:05:09][356722915627615][5125 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 18:05:09][356722915627615][5250 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 18:05:09][356722915627615][5251 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 18:05:09][356722915627615][5409 ms][DEBUG] SU: done in 158 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 18:05:11][356722915627615][7422 ms][DEBUG] START check_boot_completed [2025-08-25 18:05:11][356722915627615][7422 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:05:11][356722915627615][7469 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:05:11][356722915627615][7469 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:05:11][356722915627615][7516 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:05:11][356722915627615][7516 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 18:05:14][356722915627615][10530 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 18:05:14][356722915627615][10530 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722915627615\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9500\"}'\'' -e'"" [2025-08-25 18:05:20][356722915627615][15795 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b91eb41-55a7-472a-83d6-631e86cd3187","id":"QR_9b91eb41-55a7-472a-83d6-631e86cd3187","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:05:20][356722915627615][15951 ms][DEBUG] proc_open done in 5421 ms; code=255; res.len=3343 [2025-08-25 18:05:20][356722915627615][15951 ms][DEBUG] END runCmdUntilRes#2 in 5421 ms [2025-08-25 18:05:20][356722915627615][15951 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:06:05][354952834711693][1 ms][INFO] === Request start === [2025-08-25 18:06:05][354952834711693][1 ms][DEBUG] START check_scloud [2025-08-25 18:06:05][354952834711693][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:06:05][354952834711693][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 18299 5018 23944148 127472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:06:05][354952834711693][311 ms][DEBUG] targetPkg: running [2025-08-25 18:06:05][354952834711693][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 18:06:05][354952834711693][311 ms][DEBUG] START check_boot_completed [2025-08-25 18:06:05][354952834711693][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:06:05][354952834711693][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:06:05][354952834711693][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:06:05][354952834711693][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:06:05][354952834711693][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:06:05][354952834711693][405 ms][DEBUG] START check_internet [2025-08-25 18:06:05][354952834711693][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:06:06][354952834711693][813 ms][DEBUG] SU: done in 408 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.713/200.713/200.713/0.000 ms\n [2025-08-25 18:06:06][354952834711693][813 ms][DEBUG] check_internet: online [2025-08-25 18:06:06][354952834711693][813 ms][DEBUG] END check_internet in 408 ms [2025-08-25 18:06:06][354952834711693][813 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:06:06][354952834711693][813 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354952834711693\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1177\"}'\'' -e'"" [2025-08-25 18:06:06][354952834711693][813 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:06:06][354952834711693][813 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354952834711693\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1177\"}'\'' -e'"" [2025-08-25 18:06:11][354952834711693][5856 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26450431-5f8c-4c94-be0b-db3a9b463056","id":"QR_26450431-5f8c-4c94-be0b-db3a9b463056","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:06:11][354952834711693][6013 ms][DEBUG] proc_open done in 5200 ms; code=255; res.len=3343 [2025-08-25 18:06:11][354952834711693][6013 ms][DEBUG] END runCmdUntilRes#1 in 5200 ms [2025-08-25 18:06:11][354952834711693][6013 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:08:03][350290810326291][1 ms][INFO] === Request start === [2025-08-25 18:08:03][350290810326291][1 ms][DEBUG] START check_scloud [2025-08-25 18:08:03][350290810326291][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:08:03][350290810326291][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 18299 5018 24068040 138168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:08:03][350290810326291][293 ms][DEBUG] targetPkg: running [2025-08-25 18:08:03][350290810326291][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-25 18:08:03][350290810326291][293 ms][DEBUG] START check_boot_completed [2025-08-25 18:08:03][350290810326291][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:08:03][350290810326291][340 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:08:03][350290810326291][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:08:03][350290810326291][433 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 18:08:03][350290810326291][433 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 18:08:03][350290810326291][434 ms][DEBUG] START check_internet [2025-08-25 18:08:03][350290810326291][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:08:04][350290810326291][730 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=180 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 180.825/180.825/180.825/0.000 ms\n [2025-08-25 18:08:04][350290810326291][730 ms][DEBUG] check_internet: online [2025-08-25 18:08:04][350290810326291][730 ms][DEBUG] END check_internet in 297 ms [2025-08-25 18:08:04][350290810326291][730 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:08:04][350290810326291][730 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290810326291\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9928\"}'\'' -e'"" [2025-08-25 18:08:04][350290810326291][730 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:08:04][350290810326291][730 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290810326291\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9928\"}'\'' -e'"" [2025-08-25 18:08:07][350290810326291][4479 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 18:08:08][350290810326291][4635 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=115 [2025-08-25 18:08:08][350290810326291][4635 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 18:08:08][350290810326291][4635 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 18:08:08][][0 ms][INFO] === Request start === [2025-08-25 18:08:08][][1 ms][DEBUG] START check_scloud [2025-08-25 18:08:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:08:08][][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 18299 5018 24214736 150000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:08:08][][303 ms][DEBUG] targetPkg: running [2025-08-25 18:08:08][][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 18:08:08][][303 ms][DEBUG] START check_boot_completed [2025-08-25 18:08:08][][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:08:08][][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:08:08][][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:08:08][][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:08:08][][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:08:08][][381 ms][DEBUG] START check_internet [2025-08-25 18:08:08][][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:08:08][][616 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=147 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 147.329/147.329/147.329/0.000 ms\n [2025-08-25 18:08:08][][616 ms][DEBUG] check_internet: online [2025-08-25 18:08:08][][616 ms][DEBUG] END check_internet in 234 ms [2025-08-25 18:08:08][][616 ms][DEBUG] rawBody.length=1129 [2025-08-25 18:08:08][][616 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX20ZG30E\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1559\"}'\'' -e'"" [2025-08-25 18:08:08][][616 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:08:08][][616 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX20ZG30E\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1559\"}'\'' -e'"" [2025-08-25 18:08:12][][4115 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:08:12][][4271 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=107 [2025-08-25 18:08:12][][4271 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-25 18:08:12][][4271 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:08:14][350290810326291][0 ms][INFO] === Request start === [2025-08-25 18:08:14][350290810326291][1 ms][DEBUG] START check_scloud [2025-08-25 18:08:14][350290810326291][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:08:14][350290810326291][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 18299 5018 24371672 161120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:08:14][350290810326291][298 ms][DEBUG] targetPkg: running [2025-08-25 18:08:14][350290810326291][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 18:08:14][350290810326291][299 ms][DEBUG] START check_boot_completed [2025-08-25 18:08:14][350290810326291][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:08:14][350290810326291][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:08:14][350290810326291][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:08:14][350290810326291][408 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 18:08:14][350290810326291][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:08:14][350290810326291][408 ms][DEBUG] START check_internet [2025-08-25 18:08:14][350290810326291][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:08:15][350290810326291][783 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.958/250.958/250.958/0.000 ms\n [2025-08-25 18:08:15][350290810326291][783 ms][DEBUG] check_internet: online [2025-08-25 18:08:15][350290810326291][783 ms][DEBUG] END check_internet in 375 ms [2025-08-25 18:08:15][350290810326291][783 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:08:15][350290810326291][783 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290810326291\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5446\"}'\'' -e'"" [2025-08-25 18:08:15][350290810326291][783 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:08:15][350290810326291][783 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290810326291\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5446\"}'\'' -e'"" [2025-08-25 18:08:21][350290810326291][6656 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61b27c5e-07c4-469a-945c-95a964a51314","id":"QR_61b27c5e-07c4-469a-945c-95a964a51314","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:08:21][350290810326291][6812 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-08-25 18:08:21][350290810326291][6812 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-08-25 18:08:21][350290810326291][6812 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:08:27][353309091495141][0 ms][INFO] === Request start === [2025-08-25 18:08:27][353309091495141][1 ms][DEBUG] START check_scloud [2025-08-25 18:08:27][353309091495141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:08:27][353309091495141][253 ms][DEBUG] SU: done in 253 ms; outu0_a118 18299 5018 24526012 173260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:08:27][353309091495141][254 ms][DEBUG] targetPkg: running [2025-08-25 18:08:27][353309091495141][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-25 18:08:27][353309091495141][254 ms][DEBUG] START check_boot_completed [2025-08-25 18:08:27][353309091495141][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:08:27][353309091495141][300 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:08:27][353309091495141][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:08:27][353309091495141][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:08:27][353309091495141][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:08:27][353309091495141][347 ms][DEBUG] START check_internet [2025-08-25 18:08:27][353309091495141][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:08:28][353309091495141][660 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.174/195.174/195.174/0.000 ms\n [2025-08-25 18:08:28][353309091495141][660 ms][DEBUG] check_internet: online [2025-08-25 18:08:28][353309091495141][660 ms][DEBUG] END check_internet in 312 ms [2025-08-25 18:08:28][353309091495141][660 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:08:28][353309091495141][660 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353309091495141\",\"model\":\"SM-G960U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2940\"}'\'' -e'"" [2025-08-25 18:08:28][353309091495141][660 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:08:28][353309091495141][660 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353309091495141\",\"model\":\"SM-G960U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2940\"}'\'' -e'"" [2025-08-25 18:08:32][353309091495141][5205 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb2cd20c-e29e-4996-a4bf-900a27af3827","id":"QR_bb2cd20c-e29e-4996-a4bf-900a27af3827","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:08:32][353309091495141][5361 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-08-25 18:08:32][353309091495141][5361 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-08-25 18:08:32][353309091495141][5361 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:09:04][357042144087534][0 ms][INFO] === Request start === [2025-08-25 18:09:04][357042144087534][1 ms][DEBUG] START check_scloud [2025-08-25 18:09:04][357042144087534][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:09:04][357042144087534][265 ms][DEBUG] SU: done in 265 ms; outu0_a118 18299 5018 24637720 184304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:09:04][357042144087534][265 ms][DEBUG] targetPkg: running [2025-08-25 18:09:04][357042144087534][265 ms][DEBUG] END check_scloud in 265 ms [2025-08-25 18:09:04][357042144087534][266 ms][DEBUG] START check_boot_completed [2025-08-25 18:09:04][357042144087534][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:09:04][357042144087534][312 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:09:04][357042144087534][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:09:04][357042144087534][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:09:04][357042144087534][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:09:04][357042144087534][359 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:09:04][357042144087534][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042144087534\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2421\"}'\'' -e'"" [2025-08-25 18:09:04][357042144087534][359 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:09:04][357042144087534][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042144087534\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2421\"}'\'' -e'"" [2025-08-25 18:09:08][357042144087534][4358 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6fefa5dc-0d68-44ab-848c-fedc76792373","id":"QR_6fefa5dc-0d68-44ab-848c-fedc76792373","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:09:08][357042144087534][4514 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-25 18:09:08][357042144087534][4514 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-25 18:09:08][357042144087534][4514 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:11:03][351272334479482][0 ms][INFO] === Request start === [2025-08-25 18:11:03][351272334479482][0 ms][DEBUG] START check_scloud [2025-08-25 18:11:03][351272334479482][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:11:04][351272334479482][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 18299 5018 24769916 196180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:11:04][351272334479482][287 ms][DEBUG] targetPkg: running [2025-08-25 18:11:04][351272334479482][287 ms][DEBUG] END check_scloud in 287 ms [2025-08-25 18:11:04][351272334479482][287 ms][DEBUG] START check_boot_completed [2025-08-25 18:11:04][351272334479482][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:11:04][351272334479482][318 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:11:04][351272334479482][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:11:04][351272334479482][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:11:04][351272334479482][365 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:11:04][351272334479482][365 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:11:04][351272334479482][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272334479482\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5492\"}'\'' -e'"" [2025-08-25 18:11:04][351272334479482][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:11:04][351272334479482][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272334479482\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5492\"}'\'' -e'"" [2025-08-25 18:11:08][351272334479482][4614 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cfeaaf03-92c3-4437-89ad-d1a5fb4e676f","id":"QR_cfeaaf03-92c3-4437-89ad-d1a5fb4e676f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:11:08][351272334479482][4770 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-25 18:11:08][351272334479482][4770 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-25 18:11:08][351272334479482][4770 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:13:05][357425221478017][1 ms][INFO] === Request start === [2025-08-25 18:13:05][357425221478017][1 ms][DEBUG] START check_scloud [2025-08-25 18:13:05][357425221478017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:13:05][357425221478017][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 18299 5018 24890848 207040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:13:05][357425221478017][298 ms][DEBUG] targetPkg: running [2025-08-25 18:13:05][357425221478017][298 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 18:13:05][357425221478017][298 ms][DEBUG] START check_boot_completed [2025-08-25 18:13:05][357425221478017][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:13:05][357425221478017][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:13:05][357425221478017][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:13:05][357425221478017][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:13:05][357425221478017][391 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 18:13:05][357425221478017][391 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:13:05][357425221478017][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357425221478017\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2683\"}'\'' -e'"" [2025-08-25 18:13:05][357425221478017][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:13:05][357425221478017][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357425221478017\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2683\"}'\'' -e'"" [2025-08-25 18:13:12][357425221478017][7280 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9213421-8ad9-4cc0-aa9d-e024cddf8b88","id":"QR_c9213421-8ad9-4cc0-aa9d-e024cddf8b88","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:13:12][357425221478017][7436 ms][DEBUG] proc_open done in 7045 ms; code=255; res.len=3343 [2025-08-25 18:13:12][357425221478017][7436 ms][DEBUG] END runCmdUntilRes#1 in 7045 ms [2025-08-25 18:13:12][357425221478017][7436 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:15:03][350938281488079][1 ms][INFO] === Request start === [2025-08-25 18:15:03][350938281488079][1 ms][DEBUG] START check_scloud [2025-08-25 18:15:03][350938281488079][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:15:03][350938281488079][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18299 5018 25018884 217980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:15:03][350938281488079][307 ms][DEBUG] targetPkg: running [2025-08-25 18:15:03][350938281488079][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 18:15:03][350938281488079][307 ms][DEBUG] START check_boot_completed [2025-08-25 18:15:03][350938281488079][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:15:03][350938281488079][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:15:03][350938281488079][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:15:04][350938281488079][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:15:04][350938281488079][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:15:04][350938281488079][386 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:15:04][350938281488079][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281488079\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3826\"}'\'' -e'"" [2025-08-25 18:15:04][350938281488079][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:15:04][350938281488079][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281488079\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3826\"}'\'' -e'"" [2025-08-25 18:15:08][350938281488079][4744 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5cb70c6-be40-4e1b-9745-a170206d119c","id":"QR_d5cb70c6-be40-4e1b-9745-a170206d119c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:15:08][350938281488079][4900 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-08-25 18:15:08][350938281488079][4900 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-08-25 18:15:08][350938281488079][4900 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:16:04][351460450168480][0 ms][INFO] === Request start === [2025-08-25 18:16:04][351460450168480][1 ms][DEBUG] START check_scloud [2025-08-25 18:16:04][351460450168480][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:16:04][351460450168480][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 18299 5018 25165544 230164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:16:04][351460450168480][268 ms][DEBUG] targetPkg: running [2025-08-25 18:16:04][351460450168480][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-25 18:16:04][351460450168480][269 ms][DEBUG] START check_boot_completed [2025-08-25 18:16:04][351460450168480][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:16:04][351460450168480][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:16:04][351460450168480][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:16:05][351460450168480][364 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 18:16:05][351460450168480][364 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 18:16:05][351460450168480][364 ms][DEBUG] START check_internet [2025-08-25 18:16:05][351460450168480][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:16:05][351460450168480][940 ms][DEBUG] SU: done in 576 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.152/200.152/200.152/0.000 ms\n [2025-08-25 18:16:05][351460450168480][940 ms][DEBUG] check_internet: online [2025-08-25 18:16:05][351460450168480][940 ms][DEBUG] END check_internet in 576 ms [2025-08-25 18:16:05][351460450168480][940 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:16:05][351460450168480][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450168480\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2313\"}'\'' -e'"" [2025-08-25 18:16:05][351460450168480][940 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:16:05][351460450168480][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450168480\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2313\"}'\'' -e'"" [2025-08-25 18:16:09][351460450168480][5298 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 18:16:10][351460450168480][5454 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=115 [2025-08-25 18:16:10][351460450168480][5454 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-08-25 18:16:10][351460450168480][5454 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 18:16:10][][0 ms][INFO] === Request start === [2025-08-25 18:16:10][][1 ms][DEBUG] START check_scloud [2025-08-25 18:16:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:16:10][][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 18299 5018 25314160 241904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:16:10][][307 ms][DEBUG] targetPkg: running [2025-08-25 18:16:10][][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 18:16:10][][308 ms][DEBUG] START check_boot_completed [2025-08-25 18:16:10][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:16:10][][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:16:10][][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:16:10][][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:16:10][][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:16:10][][401 ms][DEBUG] START check_internet [2025-08-25 18:16:10][][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:16:11][][651 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.410/144.410/144.410/0.000 ms\n [2025-08-25 18:16:11][][651 ms][DEBUG] check_internet: online [2025-08-25 18:16:11][][651 ms][DEBUG] END check_internet in 250 ms [2025-08-25 18:16:11][][651 ms][DEBUG] rawBody.length=1130 [2025-08-25 18:16:11][][651 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX10604JL\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4017\"}'\'' -e'"" [2025-08-25 18:16:11][][651 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:16:11][][651 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX10604JL\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4017\"}'\'' -e'"" [2025-08-25 18:16:15][][4556 ms][DEBUG] proc_open done in 3905 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 18:16:15][][4556 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 18:16:15][][4556 ms][WARN] Detected error: Process with pid 18299 either refused to load frida-agent, or terminated during injection [2025-08-25 18:16:15][][4556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 18:16:15][][4683 ms][DEBUG] SU: done in 127 ms; out [2025-08-25 18:16:15][][4683 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 18:16:15][][4683 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 18:16:15][][4822 ms][DEBUG] SU: done in 139 ms; out [2025-08-25 18:16:15][][4822 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 18:16:15][][5009 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 18:16:17][][7024 ms][DEBUG] START check_boot_completed [2025-08-25 18:16:17][][7024 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:16:17][][7071 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:16:17][][7071 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:16:17][][7134 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:16:17][][7134 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 18:16:20][][10149 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 18:16:20][][10149 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX10604JL\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4017\"}'\'' -e'"" [2025-08-25 18:16:24][][14320 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 18:16:24][][14476 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=115 [2025-08-25 18:16:24][][14476 ms][DEBUG] END runCmdUntilRes#2 in 4327 ms [2025-08-25 18:16:24][][14476 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 18:16:25][351460450168480][0 ms][INFO] === Request start === [2025-08-25 18:16:25][351460450168480][1 ms][DEBUG] START check_scloud [2025-08-25 18:16:25][351460450168480][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:16:25][351460450168480][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 19695 5018 24053404 124368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:16:25][351460450168480][269 ms][DEBUG] targetPkg: running [2025-08-25 18:16:25][351460450168480][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-25 18:16:25][351460450168480][269 ms][DEBUG] START check_boot_completed [2025-08-25 18:16:25][351460450168480][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:16:25][351460450168480][315 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:16:25][351460450168480][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:16:25][351460450168480][378 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:16:25][351460450168480][378 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:16:25][351460450168480][378 ms][DEBUG] START check_internet [2025-08-25 18:16:25][351460450168480][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:16:26][351460450168480][628 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.396/149.396/149.396/0.000 ms\n [2025-08-25 18:16:26][351460450168480][628 ms][DEBUG] check_internet: online [2025-08-25 18:16:26][351460450168480][628 ms][DEBUG] END check_internet in 250 ms [2025-08-25 18:16:26][351460450168480][628 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:16:26][351460450168480][628 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450168480\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4652\"}'\'' -e'"" [2025-08-25 18:16:26][351460450168480][628 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:16:26][351460450168480][628 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450168480\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4652\"}'\'' -e'"" [2025-08-25 18:16:29][351460450168480][4205 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 18:16:29][351460450168480][4361 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=115 [2025-08-25 18:16:29][351460450168480][4361 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-25 18:16:29][351460450168480][4361 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 18:16:30][][0 ms][INFO] === Request start === [2025-08-25 18:16:30][][1 ms][DEBUG] START check_scloud [2025-08-25 18:16:30][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:16:30][][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 19695 5018 24216356 136172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:16:30][][267 ms][DEBUG] targetPkg: running [2025-08-25 18:16:30][][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-25 18:16:30][][267 ms][DEBUG] START check_boot_completed [2025-08-25 18:16:30][][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:16:30][][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:16:30][][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:16:30][][377 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 18:16:30][][377 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 18:16:30][][377 ms][DEBUG] START check_internet [2025-08-25 18:16:30][][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:16:30][][657 ms][DEBUG] SU: done in 280 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.787/137.787/137.787/0.000 ms\n [2025-08-25 18:16:30][][657 ms][DEBUG] check_internet: online [2025-08-25 18:16:30][][657 ms][DEBUG] END check_internet in 280 ms [2025-08-25 18:16:30][][657 ms][DEBUG] rawBody.length=1129 [2025-08-25 18:16:30][][657 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX10604JL\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5090\"}'\'' -e'"" [2025-08-25 18:16:30][][657 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:16:30][][658 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX10604JL\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5090\"}'\'' -e'"" [2025-08-25 18:16:34][][4141 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 18:16:34][][4297 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=115 [2025-08-25 18:16:34][][4297 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-25 18:16:34][][4297 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 18:17:07][352208774016821][1 ms][INFO] === Request start === [2025-08-25 18:17:07][352208774016821][1 ms][DEBUG] START check_scloud [2025-08-25 18:17:07][352208774016821][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:17:07][352208774016821][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 19695 5018 24263260 149456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:17:07][352208774016821][260 ms][DEBUG] targetPkg: running [2025-08-25 18:17:07][352208774016821][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 18:17:07][352208774016821][260 ms][DEBUG] START check_boot_completed [2025-08-25 18:17:07][352208774016821][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:17:07][352208774016821][291 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:17:07][352208774016821][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:17:08][352208774016821][338 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:17:08][352208774016821][338 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:17:08][352208774016821][338 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:17:08][352208774016821][338 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208774016821\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5039\"}'\'' -e'"" [2025-08-25 18:17:08][352208774016821][338 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:17:08][352208774016821][338 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208774016821\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5039\"}'\'' -e'"" [2025-08-25 18:17:13][352208774016821][6040 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0cda1af-6982-463e-a9ce-2ee3504b178a","id":"QR_b0cda1af-6982-463e-a9ce-2ee3504b178a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:17:13][352208774016821][6196 ms][DEBUG] proc_open done in 5858 ms; code=255; res.len=3343 [2025-08-25 18:17:13][352208774016821][6196 ms][DEBUG] END runCmdUntilRes#1 in 5858 ms [2025-08-25 18:17:13][352208774016821][6196 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:19:03][353418794277688][0 ms][INFO] === Request start === [2025-08-25 18:19:03][353418794277688][1 ms][DEBUG] START check_scloud [2025-08-25 18:19:03][353418794277688][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:19:03][353418794277688][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 19695 5018 24372944 160120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:19:03][353418794277688][318 ms][DEBUG] targetPkg: running [2025-08-25 18:19:03][353418794277688][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 18:19:03][353418794277688][318 ms][DEBUG] START check_boot_completed [2025-08-25 18:19:03][353418794277688][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:19:03][353418794277688][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:19:03][353418794277688][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:19:03][353418794277688][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:19:03][353418794277688][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:19:03][353418794277688][411 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:19:03][353418794277688][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353418794277688\",\"model\":\"SM-A5360\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BRI\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3785\"}'\'' -e'"" [2025-08-25 18:19:03][353418794277688][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:19:03][353418794277688][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353418794277688\",\"model\":\"SM-A5360\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BRI\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3785\"}'\'' -e'"" [2025-08-25 18:19:07][353418794277688][4254 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ccb21d58-846d-4c20-bf12-0bfb68983b94","id":"QR_ccb21d58-846d-4c20-bf12-0bfb68983b94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:19:07][353418794277688][4410 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-08-25 18:19:07][353418794277688][4411 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-25 18:19:07][353418794277688][4411 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:20:04][350274357034435][1 ms][INFO] === Request start === [2025-08-25 18:20:04][350274357034435][1 ms][DEBUG] START check_scloud [2025-08-25 18:20:04][350274357034435][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:20:04][350274357034435][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 19695 5018 24488948 163328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:20:04][350274357034435][257 ms][DEBUG] targetPkg: running [2025-08-25 18:20:04][350274357034435][258 ms][DEBUG] END check_scloud in 256 ms [2025-08-25 18:20:04][350274357034435][258 ms][DEBUG] START check_boot_completed [2025-08-25 18:20:04][350274357034435][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:20:04][350274357034435][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:20:04][350274357034435][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:20:04][350274357034435][335 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:20:04][350274357034435][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:20:04][350274357034435][336 ms][DEBUG] START check_internet [2025-08-25 18:20:04][350274357034435][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:20:04][350274357034435][679 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.621/239.621/239.621/0.000 ms\n [2025-08-25 18:20:04][350274357034435][679 ms][DEBUG] check_internet: online [2025-08-25 18:20:04][350274357034435][679 ms][DEBUG] END check_internet in 344 ms [2025-08-25 18:20:04][350274357034435][680 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:20:04][350274357034435][680 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274357034435\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5786\"}'\'' -e'"" [2025-08-25 18:20:04][350274357034435][680 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:20:04][350274357034435][680 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274357034435\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5786\"}'\'' -e'"" [2025-08-25 18:20:08][350274357034435][4819 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:20:09][350274357034435][4975 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=107 [2025-08-25 18:20:09][350274357034435][4975 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-25 18:20:09][350274357034435][4975 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:20:09][][0 ms][INFO] === Request start === [2025-08-25 18:20:09][][1 ms][DEBUG] START check_scloud [2025-08-25 18:20:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:20:09][][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 19695 5018 24641788 169736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:20:09][][310 ms][DEBUG] targetPkg: running [2025-08-25 18:20:09][][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 18:20:09][][310 ms][DEBUG] START check_boot_completed [2025-08-25 18:20:09][][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:20:09][][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:20:09][][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:20:09][][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:20:09][][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:20:09][][403 ms][DEBUG] START check_internet [2025-08-25 18:20:09][][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:20:09][][653 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.980/137.980/137.980/0.000 ms\n [2025-08-25 18:20:09][][654 ms][DEBUG] check_internet: online [2025-08-25 18:20:09][][654 ms][DEBUG] END check_internet in 250 ms [2025-08-25 18:20:09][][654 ms][DEBUG] rawBody.length=1130 [2025-08-25 18:20:09][][654 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8RC0HL1CB\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5054\"}'\'' -e'"" [2025-08-25 18:20:09][][654 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:20:09][][654 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8RC0HL1CB\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5054\"}'\'' -e'"" [2025-08-25 18:20:13][][4543 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:20:14][][4699 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=107 [2025-08-25 18:20:14][][4699 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-25 18:20:14][][4699 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:21:04][357567917246537][0 ms][INFO] === Request start === [2025-08-25 18:21:04][357567917246537][1 ms][DEBUG] START check_scloud [2025-08-25 18:21:04][357567917246537][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:21:04][357567917246537][267 ms][DEBUG] SU: done in 267 ms; outu0_a118 19695 5018 24757564 180928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:21:04][357567917246537][267 ms][DEBUG] targetPkg: running [2025-08-25 18:21:04][357567917246537][267 ms][DEBUG] END check_scloud in 267 ms [2025-08-25 18:21:04][357567917246537][268 ms][DEBUG] START check_boot_completed [2025-08-25 18:21:04][357567917246537][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:21:04][357567917246537][299 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:21:04][357567917246537][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:21:04][357567917246537][346 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:21:04][357567917246537][346 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:21:04][357567917246537][346 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:21:04][357567917246537][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567917246537\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3999\"}'\'' -e'"" [2025-08-25 18:21:04][357567917246537][346 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:21:04][357567917246537][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567917246537\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3999\"}'\'' -e'"" [2025-08-25 18:21:09][357567917246537][5438 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f60cea6a-7b9e-469a-884a-7f1942a15a98","id":"QR_f60cea6a-7b9e-469a-884a-7f1942a15a98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:21:09][357567917246537][5594 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-08-25 18:21:09][357567917246537][5594 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-08-25 18:21:09][357567917246537][5594 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:22:03][352469853361013][0 ms][INFO] === Request start === [2025-08-25 18:22:03][352469853361013][1 ms][DEBUG] START check_scloud [2025-08-25 18:22:03][352469853361013][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:22:03][352469853361013][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 19695 5018 24879520 192812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:22:03][352469853361013][307 ms][DEBUG] targetPkg: running [2025-08-25 18:22:03][352469853361013][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 18:22:03][352469853361013][307 ms][DEBUG] START check_boot_completed [2025-08-25 18:22:03][352469853361013][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:22:03][352469853361013][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:22:03][352469853361013][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:22:03][352469853361013][401 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 18:22:03][352469853361013][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 18:22:03][352469853361013][402 ms][DEBUG] START check_internet [2025-08-25 18:22:03][352469853361013][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:22:04][352469853361013][884 ms][DEBUG] SU: done in 483 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.952/201.952/201.952/0.000 ms\n [2025-08-25 18:22:04][352469853361013][885 ms][DEBUG] check_internet: online [2025-08-25 18:22:04][352469853361013][885 ms][DEBUG] END check_internet in 483 ms [2025-08-25 18:22:04][352469853361013][885 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:22:04][352469853361013][885 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853361013\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3655\"}'\'' -e'"" [2025-08-25 18:22:04][352469853361013][885 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:22:04][352469853361013][885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853361013\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3655\"}'\'' -e'"" [2025-08-25 18:22:08][352469853361013][5008 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86ef32e2-c15d-49ea-9afb-51a5efdc31cb","id":"QR_86ef32e2-c15d-49ea-9afb-51a5efdc31cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:22:08][352469853361013][5165 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-25 18:22:08][352469853361013][5165 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-25 18:22:08][352469853361013][5165 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:22:10][350814493560007][1 ms][INFO] === Request start === [2025-08-25 18:22:10][350814493560007][1 ms][DEBUG] START check_scloud [2025-08-25 18:22:10][350814493560007][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:22:11][350814493560007][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 19695 5018 25007656 202908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:22:11][350814493560007][265 ms][DEBUG] targetPkg: running [2025-08-25 18:22:11][350814493560007][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-25 18:22:11][350814493560007][265 ms][DEBUG] START check_boot_completed [2025-08-25 18:22:11][350814493560007][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:22:11][350814493560007][310 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 18:22:11][350814493560007][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:22:11][350814493560007][357 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:22:11][350814493560007][357 ms][DEBUG] END check_boot_completed in 91 ms [2025-08-25 18:22:11][350814493560007][357 ms][DEBUG] START check_internet [2025-08-25 18:22:11][350814493560007][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:22:11][350814493560007][685 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.458/223.458/223.458/0.000 ms\n [2025-08-25 18:22:11][350814493560007][685 ms][DEBUG] check_internet: online [2025-08-25 18:22:11][350814493560007][685 ms][DEBUG] END check_internet in 328 ms [2025-08-25 18:22:11][350814493560007][685 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:22:11][350814493560007][685 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814493560007\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8632\"}'\'' -e'"" [2025-08-25 18:22:11][350814493560007][685 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:22:11][350814493560007][686 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814493560007\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8632\"}'\'' -e'"" [2025-08-25 18:22:15][350814493560007][4449 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_840efde1-bfb7-4867-b3b4-05136c1f66f5","id":"QR_840efde1-bfb7-4867-b3b4-05136c1f66f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:22:15][350814493560007][4606 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-25 18:22:15][350814493560007][4606 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-25 18:22:15][350814493560007][4606 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:25:03][352192669178575][1 ms][INFO] === Request start === [2025-08-25 18:25:03][352192669178575][1 ms][DEBUG] START check_scloud [2025-08-25 18:25:03][352192669178575][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:25:03][352192669178575][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 19695 5018 25119464 215168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:25:03][352192669178575][305 ms][DEBUG] targetPkg: running [2025-08-25 18:25:03][352192669178575][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 18:25:03][352192669178575][305 ms][DEBUG] START check_boot_completed [2025-08-25 18:25:03][352192669178575][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:25:03][352192669178575][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:25:03][352192669178575][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:25:03][352192669178575][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:25:03][352192669178575][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:25:03][352192669178575][383 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:25:03][352192669178575][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669178575\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8586\"}'\'' -e'"" [2025-08-25 18:25:03][352192669178575][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:25:03][352192669178575][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669178575\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8586\"}'\'' -e'"" [2025-08-25 18:25:08][352192669178575][4694 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0005bc2a-50ae-4c67-8fc7-b99bb51d8266","id":"QR_0005bc2a-50ae-4c67-8fc7-b99bb51d8266","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:25:08][352192669178575][4850 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-25 18:25:08][352192669178575][4850 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-25 18:25:08][352192669178575][4850 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:26:05][351088370943268][0 ms][INFO] === Request start === [2025-08-25 18:26:05][351088370943268][1 ms][DEBUG] START check_scloud [2025-08-25 18:26:05][351088370943268][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:26:05][351088370943268][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 19695 5018 25223120 226096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:26:05][351088370943268][304 ms][DEBUG] targetPkg: running [2025-08-25 18:26:05][351088370943268][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 18:26:05][351088370943268][305 ms][DEBUG] START check_boot_completed [2025-08-25 18:26:05][351088370943268][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:26:05][351088370943268][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:26:05][351088370943268][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:26:05][351088370943268][429 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 18:26:05][351088370943268][429 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 18:26:05][351088370943268][429 ms][DEBUG] START check_internet [2025-08-25 18:26:05][351088370943268][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:26:06][351088370943268][929 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.014/202.014/202.014/0.000 ms\n [2025-08-25 18:26:06][351088370943268][929 ms][DEBUG] check_internet: online [2025-08-25 18:26:06][351088370943268][929 ms][DEBUG] END check_internet in 500 ms [2025-08-25 18:26:06][351088370943268][929 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:26:06][351088370943268][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088370943268\",\"model\":\"SM-M625F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5249\"}'\'' -e'"" [2025-08-25 18:26:06][351088370943268][929 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:26:06][351088370943268][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088370943268\",\"model\":\"SM-M625F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5249\"}'\'' -e'"" [2025-08-25 18:26:10][351088370943268][4913 ms][DEBUG] proc_open done in 3984 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 18:26:10][351088370943268][4913 ms][DEBUG] END runCmdUntilRes#1 in 3984 ms [2025-08-25 18:26:10][351088370943268][4913 ms][WARN] Detected error: Process with pid 19695 either refused to load frida-agent, or terminated during injection [2025-08-25 18:26:10][351088370943268][4913 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 18:26:10][351088370943268][5053 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 18:26:10][351088370943268][5053 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 18:26:10][351088370943268][5054 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 18:26:10][351088370943268][5194 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 18:26:10][351088370943268][5194 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 18:26:10][351088370943268][5381 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 18:26:12][351088370943268][7396 ms][DEBUG] START check_boot_completed [2025-08-25 18:26:12][351088370943268][7396 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:26:12][351088370943268][7443 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:26:12][351088370943268][7443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:26:12][351088370943268][7490 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:26:12][351088370943268][7490 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 18:26:15][351088370943268][10505 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 18:26:15][351088370943268][10505 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088370943268\",\"model\":\"SM-M625F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5249\"}'\'' -e'"" [2025-08-25 18:26:21][351088370943268][16722 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e94498c0-f05b-4554-8af6-20cc436be632","id":"QR_e94498c0-f05b-4554-8af6-20cc436be632","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:26:22][351088370943268][16879 ms][DEBUG] proc_open done in 6373 ms; code=255; res.len=3343 [2025-08-25 18:26:22][351088370943268][16879 ms][DEBUG] END runCmdUntilRes#2 in 6374 ms [2025-08-25 18:26:22][351088370943268][16879 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:28:03][350042738649001][1 ms][INFO] === Request start === [2025-08-25 18:28:03][350042738649001][1 ms][DEBUG] START check_scloud [2025-08-25 18:28:03][350042738649001][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:28:04][350042738649001][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 21624 5018 23956048 127724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:28:04][350042738649001][314 ms][DEBUG] targetPkg: running [2025-08-25 18:28:04][350042738649001][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 18:28:04][350042738649001][314 ms][DEBUG] START check_boot_completed [2025-08-25 18:28:04][350042738649001][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:28:04][350042738649001][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:28:04][350042738649001][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:28:04][350042738649001][425 ms][DEBUG] SU: done in 64 ms; out [2025-08-25 18:28:04][350042738649001][426 ms][DEBUG] END check_boot_completed in 111 ms [2025-08-25 18:28:04][350042738649001][426 ms][DEBUG] START check_internet [2025-08-25 18:28:04][350042738649001][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:28:04][350042738649001][720 ms][DEBUG] SU: done in 294 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.447/189.447/189.447/0.000 ms\n [2025-08-25 18:28:04][350042738649001][720 ms][DEBUG] check_internet: online [2025-08-25 18:28:04][350042738649001][720 ms][DEBUG] END check_internet in 295 ms [2025-08-25 18:28:04][350042738649001][720 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:28:04][350042738649001][720 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042738649001\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7962\"}'\'' -e'"" [2025-08-25 18:28:04][350042738649001][721 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:28:04][350042738649001][721 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042738649001\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7962\"}'\'' -e'"" [2025-08-25 18:28:08][350042738649001][4735 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0454152c-584b-4bba-8765-378bbe80cce6","id":"QR_0454152c-584b-4bba-8765-378bbe80cce6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:28:08][350042738649001][4891 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-25 18:28:08][350042738649001][4891 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-25 18:28:08][350042738649001][4891 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:28:11][350536255968553][0 ms][INFO] === Request start === [2025-08-25 18:28:11][350536255968553][1 ms][DEBUG] START check_scloud [2025-08-25 18:28:11][350536255968553][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:28:11][350536255968553][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 21624 5018 24121156 138968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:28:11][350536255968553][288 ms][DEBUG] targetPkg: running [2025-08-25 18:28:11][350536255968553][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-25 18:28:11][350536255968553][289 ms][DEBUG] START check_boot_completed [2025-08-25 18:28:11][350536255968553][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:28:11][350536255968553][335 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:28:11][350536255968553][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:28:11][350536255968553][398 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:28:11][350536255968553][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:28:11][350536255968553][398 ms][DEBUG] START check_internet [2025-08-25 18:28:11][350536255968553][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:28:11][350536255968553][648 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.025/144.025/144.025/0.000 ms\n [2025-08-25 18:28:11][350536255968553][648 ms][DEBUG] check_internet: online [2025-08-25 18:28:11][350536255968553][648 ms][DEBUG] END check_internet in 250 ms [2025-08-25 18:28:11][350536255968553][648 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:28:11][350536255968553][648 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536255968553\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6590\"}'\'' -e'"" [2025-08-25 18:28:11][350536255968553][648 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:28:11][350536255968553][648 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536255968553\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6590\"}'\'' -e'"" [2025-08-25 18:28:15][350536255968553][4584 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74912dfb-0d42-4869-9122-a9b1675e170d","id":"QR_74912dfb-0d42-4869-9122-a9b1675e170d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:28:15][350536255968553][4740 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-25 18:28:15][350536255968553][4740 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-25 18:28:15][350536255968553][4740 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:30:04][350961873094600][1 ms][INFO] === Request start === [2025-08-25 18:30:04][350961873094600][1 ms][DEBUG] START check_scloud [2025-08-25 18:30:04][350961873094600][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:30:04][350961873094600][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 21624 5018 24285216 150884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:30:04][350961873094600][286 ms][DEBUG] targetPkg: running [2025-08-25 18:30:04][350961873094600][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-25 18:30:04][350961873094600][287 ms][DEBUG] START check_boot_completed [2025-08-25 18:30:04][350961873094600][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:30:04][350961873094600][333 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:30:04][350961873094600][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:30:04][350961873094600][427 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 18:30:04][350961873094600][427 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 18:30:04][350961873094600][427 ms][DEBUG] START check_internet [2025-08-25 18:30:04][350961873094600][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:30:04][350961873094600][739 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.833/196.833/196.833/0.000 ms\n [2025-08-25 18:30:04][350961873094600][740 ms][DEBUG] check_internet: online [2025-08-25 18:30:04][350961873094600][740 ms][DEBUG] END check_internet in 313 ms [2025-08-25 18:30:04][350961873094600][740 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:30:04][350961873094600][740 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961873094600\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8669\"}'\'' -e'"" [2025-08-25 18:30:04][350961873094600][740 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:30:04][350961873094600][740 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961873094600\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8669\"}'\'' -e'"" [2025-08-25 18:30:09][350961873094600][5019 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5dff662d-0445-4cfe-85c4-d5864a48a5b9","id":"QR_5dff662d-0445-4cfe-85c4-d5864a48a5b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:30:09][350961873094600][5176 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-25 18:30:09][350961873094600][5176 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-25 18:30:09][350961873094600][5176 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:31:04][353781104443773][0 ms][INFO] === Request start === [2025-08-25 18:31:04][353781104443773][1 ms][DEBUG] START check_scloud [2025-08-25 18:31:04][353781104443773][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:31:05][353781104443773][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 21624 5018 24417284 161800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:31:05][353781104443773][298 ms][DEBUG] targetPkg: running [2025-08-25 18:31:05][353781104443773][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 18:31:05][353781104443773][298 ms][DEBUG] START check_boot_completed [2025-08-25 18:31:05][353781104443773][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:31:05][353781104443773][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:31:05][353781104443773][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:31:05][353781104443773][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:31:05][353781104443773][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:31:05][353781104443773][392 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:31:05][353781104443773][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353781104443773\",\"model\":\"SM-J415G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZVV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7758\"}'\'' -e'"" [2025-08-25 18:31:05][353781104443773][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:31:05][353781104443773][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353781104443773\",\"model\":\"SM-J415G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZVV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7758\"}'\'' -e'"" [2025-08-25 18:31:10][353781104443773][5500 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99bb9bc7-3d50-4dfd-b196-2f0a28350bf4","id":"QR_99bb9bc7-3d50-4dfd-b196-2f0a28350bf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:31:10][353781104443773][5656 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-08-25 18:31:10][353781104443773][5656 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-08-25 18:31:10][353781104443773][5656 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:33:04][353384830295409][1 ms][INFO] === Request start === [2025-08-25 18:33:04][353384830295409][1 ms][DEBUG] START check_scloud [2025-08-25 18:33:04][353384830295409][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:33:04][353384830295409][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 21624 5018 24520744 172632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:33:04][353384830295409][305 ms][DEBUG] targetPkg: running [2025-08-25 18:33:04][353384830295409][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 18:33:04][353384830295409][305 ms][DEBUG] START check_boot_completed [2025-08-25 18:33:04][353384830295409][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:33:04][353384830295409][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:33:04][353384830295409][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:33:04][353384830295409][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:33:04][353384830295409][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:33:04][353384830295409][399 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:33:04][353384830295409][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353384830295409\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5253\"}'\'' -e'"" [2025-08-25 18:33:04][353384830295409][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:33:04][353384830295409][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353384830295409\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5253\"}'\'' -e'"" [2025-08-25 18:33:09][353384830295409][5444 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13fa5c53-f01c-4744-b0b8-da015c74ca51","id":"QR_13fa5c53-f01c-4744-b0b8-da015c74ca51","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:33:10][353384830295409][5600 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-08-25 18:33:10][353384830295409][5600 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-08-25 18:33:10][353384830295409][5600 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:34:05][353246117430555][0 ms][INFO] === Request start === [2025-08-25 18:34:05][353246117430555][1 ms][DEBUG] START check_scloud [2025-08-25 18:34:05][353246117430555][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:34:06][353246117430555][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 21624 5018 24673552 184608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:34:06][353246117430555][311 ms][DEBUG] targetPkg: running [2025-08-25 18:34:06][353246117430555][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 18:34:06][353246117430555][311 ms][DEBUG] START check_boot_completed [2025-08-25 18:34:06][353246117430555][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:34:06][353246117430555][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:34:06][353246117430555][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:34:06][353246117430555][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:34:06][353246117430555][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:34:06][353246117430555][420 ms][DEBUG] START check_internet [2025-08-25 18:34:06][353246117430555][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:34:06][353246117430555][889 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.165/201.165/201.165/0.000 ms\n [2025-08-25 18:34:06][353246117430555][889 ms][DEBUG] check_internet: online [2025-08-25 18:34:06][353246117430555][889 ms][DEBUG] END check_internet in 468 ms [2025-08-25 18:34:06][353246117430555][889 ms][DEBUG] rawBody.length=1159 [2025-08-25 18:34:06][353246117430555][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353246117430555\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YTB0GR30B\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9017\"}'\'' -e'"" [2025-08-25 18:34:06][353246117430555][889 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:34:06][353246117430555][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353246117430555\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YTB0GR30B\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9017\"}'\'' -e'"" [2025-08-25 18:34:13][353246117430555][7684 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf0744fa-a514-4abb-a5c0-27b26ce7877a","id":"QR_bf0744fa-a514-4abb-a5c0-27b26ce7877a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:34:13][353246117430555][7840 ms][DEBUG] proc_open done in 6951 ms; code=255; res.len=3343 [2025-08-25 18:34:13][353246117430555][7840 ms][DEBUG] END runCmdUntilRes#1 in 6951 ms [2025-08-25 18:34:13][353246117430555][7840 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:34:17][352923540733869][0 ms][INFO] === Request start === [2025-08-25 18:34:17][352923540733869][1 ms][DEBUG] START check_scloud [2025-08-25 18:34:17][352923540733869][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:34:17][352923540733869][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 21624 5018 24846872 195068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:34:17][352923540733869][264 ms][DEBUG] targetPkg: running [2025-08-25 18:34:17][352923540733869][264 ms][DEBUG] END check_scloud in 264 ms [2025-08-25 18:34:17][352923540733869][264 ms][DEBUG] START check_boot_completed [2025-08-25 18:34:17][352923540733869][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:34:17][352923540733869][295 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:34:17][352923540733869][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:34:18][352923540733869][343 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 18:34:18][352923540733869][343 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 18:34:18][352923540733869][343 ms][DEBUG] START check_internet [2025-08-25 18:34:18][352923540733869][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:34:18][352923540733869][670 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.772/224.772/224.772/0.000 ms\n [2025-08-25 18:34:18][352923540733869][671 ms][DEBUG] check_internet: online [2025-08-25 18:34:18][352923540733869][671 ms][DEBUG] END check_internet in 327 ms [2025-08-25 18:34:18][352923540733869][671 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:34:18][352923540733869][671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923540733869\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7146\"}'\'' -e'"" [2025-08-25 18:34:18][352923540733869][671 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:34:18][352923540733869][671 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923540733869\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7146\"}'\'' -e'"" [2025-08-25 18:34:22][352923540733869][4857 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9261d467-18cc-4117-a2e4-4e39b5c060b7","id":"QR_9261d467-18cc-4117-a2e4-4e39b5c060b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:34:22][352923540733869][5013 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-25 18:34:22][352923540733869][5013 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-25 18:34:22][352923540733869][5013 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:35:04][353182770249513][0 ms][INFO] === Request start === [2025-08-25 18:35:04][353182770249513][0 ms][DEBUG] START check_scloud [2025-08-25 18:35:04][353182770249513][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:35:04][353182770249513][283 ms][DEBUG] SU: done in 283 ms; outu0_a118 21624 5018 24979160 207132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:35:04][353182770249513][283 ms][DEBUG] targetPkg: running [2025-08-25 18:35:04][353182770249513][283 ms][DEBUG] END check_scloud in 283 ms [2025-08-25 18:35:04][353182770249513][283 ms][DEBUG] START check_boot_completed [2025-08-25 18:35:04][353182770249513][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:35:04][353182770249513][315 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:35:04][353182770249513][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:35:04][353182770249513][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:35:04][353182770249513][361 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:35:04][353182770249513][361 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:35:04][353182770249513][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182770249513\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1782\"}'\'' -e'"" [2025-08-25 18:35:04][353182770249513][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:35:04][353182770249513][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182770249513\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1782\"}'\'' -e'"" [2025-08-25 18:35:10][353182770249513][5673 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e43940b4-7f71-44e9-b253-6b08f38cfc2f","id":"QR_e43940b4-7f71-44e9-b253-6b08f38cfc2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:35:10][353182770249513][5829 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-08-25 18:35:10][353182770249513][5829 ms][DEBUG] END runCmdUntilRes#1 in 5468 ms [2025-08-25 18:35:10][353182770249513][5829 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:37:04][356722912789889][1 ms][INFO] === Request start === [2025-08-25 18:37:04][356722912789889][1 ms][DEBUG] START check_scloud [2025-08-25 18:37:04][356722912789889][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:37:05][356722912789889][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 21624 5018 25111356 211696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:37:05][356722912789889][269 ms][DEBUG] targetPkg: running [2025-08-25 18:37:05][356722912789889][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-25 18:37:05][356722912789889][269 ms][DEBUG] START check_boot_completed [2025-08-25 18:37:05][356722912789889][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:37:05][356722912789889][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:37:05][356722912789889][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:37:05][356722912789889][364 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 18:37:05][356722912789889][364 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 18:37:05][356722912789889][364 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:37:05][356722912789889][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722912789889\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1838\"}'\'' -e'"" [2025-08-25 18:37:05][356722912789889][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:37:05][356722912789889][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722912789889\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1838\"}'\'' -e'"" [2025-08-25 18:37:10][356722912789889][5939 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3932878c-6a56-4e6b-9fb6-f4f0db0ee20a","id":"QR_3932878c-6a56-4e6b-9fb6-f4f0db0ee20a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:37:10][356722912789889][6096 ms][DEBUG] proc_open done in 5731 ms; code=255; res.len=3343 [2025-08-25 18:37:10][356722912789889][6096 ms][DEBUG] END runCmdUntilRes#1 in 5731 ms [2025-08-25 18:37:10][356722912789889][6096 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:37:15][350938286260572][0 ms][INFO] === Request start === [2025-08-25 18:37:15][350938286260572][1 ms][DEBUG] START check_scloud [2025-08-25 18:37:15][350938286260572][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:37:16][350938286260572][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 21624 5018 25235396 177412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:37:16][350938286260572][269 ms][DEBUG] targetPkg: running [2025-08-25 18:37:16][350938286260572][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-25 18:37:16][350938286260572][269 ms][DEBUG] START check_boot_completed [2025-08-25 18:37:16][350938286260572][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:37:16][350938286260572][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:37:16][350938286260572][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:37:16][350938286260572][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:37:16][350938286260572][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:37:16][350938286260572][362 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:37:16][350938286260572][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938286260572\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5729\"}'\'' -e'"" [2025-08-25 18:37:16][350938286260572][362 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:37:16][350938286260572][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938286260572\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5729\"}'\'' -e'"" [2025-08-25 18:37:20][350938286260572][4486 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c2e1286-0b26-4428-9061-538c35d5d1c0","id":"QR_4c2e1286-0b26-4428-9061-538c35d5d1c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:37:20][350938286260572][4642 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-25 18:37:20][350938286260572][4642 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-25 18:37:20][350938286260572][4643 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:39:03][350886065540815][1 ms][INFO] === Request start === [2025-08-25 18:39:03][350886065540815][1 ms][DEBUG] START check_scloud [2025-08-25 18:39:03][350886065540815][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:39:03][350886065540815][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 21624 5018 25365636 160580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:39:03][350886065540815][257 ms][DEBUG] targetPkg: running [2025-08-25 18:39:03][350886065540815][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-25 18:39:03][350886065540815][257 ms][DEBUG] START check_boot_completed [2025-08-25 18:39:03][350886065540815][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:39:03][350886065540815][288 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:39:03][350886065540815][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:39:03][350886065540815][336 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 18:39:03][350886065540815][336 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 18:39:03][350886065540815][337 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:39:03][350886065540815][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350886065540815\",\"model\":\"SM-M346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9173\"}'\'' -e'"" [2025-08-25 18:39:03][350886065540815][337 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:39:03][350886065540815][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350886065540815\",\"model\":\"SM-M346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9173\"}'\'' -e'"" [2025-08-25 18:39:12][350886065540815][8865 ms][DEBUG] proc_open done in 8528 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 18:39:12][350886065540815][8865 ms][DEBUG] END runCmdUntilRes#1 in 8528 ms [2025-08-25 18:39:12][350886065540815][8865 ms][WARN] Detected error: Process with pid 21624 either refused to load frida-agent, or terminated during injection [2025-08-25 18:39:12][350886065540815][8865 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 18:39:12][350886065540815][9208 ms][DEBUG] SU: done in 343 ms; out [2025-08-25 18:39:12][350886065540815][9208 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 18:39:12][350886065540815][9209 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 18:39:13][350886065540815][9599 ms][DEBUG] SU: done in 390 ms; out [2025-08-25 18:39:13][350886065540815][9599 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 18:39:13][350886065540815][9849 ms][DEBUG] SU: done in 250 ms; out [2025-08-25 18:39:15][350886065540815][11864 ms][DEBUG] START check_boot_completed [2025-08-25 18:39:15][350886065540815][11864 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:39:15][350886065540815][11911 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:39:15][350886065540815][11911 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:39:15][350886065540815][11989 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 18:39:15][350886065540815][11989 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 18:39:18][350886065540815][15004 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 18:39:18][350886065540815][15004 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350886065540815\",\"model\":\"SM-M346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9173\"}'\'' -e'"" [2025-08-25 18:39:19][350886065540815][15504 ms][DEBUG] proc_open done in 500 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-25 18:39:19][350886065540815][15504 ms][DEBUG] END runCmdUntilRes#2 in 500 ms [2025-08-25 18:39:19][350886065540815][15504 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-08-25 18:40:03][350886065540815][1 ms][INFO] === Request start === [2025-08-25 18:40:03][350886065540815][1 ms][DEBUG] START check_scloud [2025-08-25 18:40:03][350886065540815][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:40:03][350886065540815][358 ms][DEBUG] SU: done in 357 ms; out [2025-08-25 18:40:03][350886065540815][358 ms][WARN] targetPkg: not running, restarting [2025-08-25 18:40:03][350886065540815][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 18:40:03][350886065540815][514 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 18:40:03][350886065540815][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 18:40:04][350886065540815][764 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 18:40:06][350886065540815][2779 ms][DEBUG] END check_scloud in 2778 ms [2025-08-25 18:40:06][350886065540815][2779 ms][DEBUG] START check_boot_completed [2025-08-25 18:40:06][350886065540815][2779 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:40:06][350886065540815][2826 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:40:06][350886065540815][2826 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:40:06][350886065540815][2888 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:40:06][350886065540815][2888 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:40:06][350886065540815][2888 ms][DEBUG] START check_internet [2025-08-25 18:40:06][350886065540815][2888 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:40:06][350886065540815][3185 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=154 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 154.786/154.786/154.786/0.000 ms\n [2025-08-25 18:40:06][350886065540815][3185 ms][DEBUG] check_internet: online [2025-08-25 18:40:06][350886065540815][3185 ms][DEBUG] END check_internet in 297 ms [2025-08-25 18:40:06][350886065540815][3186 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:40:06][350886065540815][3186 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350886065540815\",\"model\":\"SM-M346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2181\"}'\'' -e'"" [2025-08-25 18:40:06][350886065540815][3186 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:40:06][350886065540815][3186 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350886065540815\",\"model\":\"SM-M346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2181\"}'\'' -e'"" [2025-08-25 18:40:13][350886065540815][9918 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bde0ede-76a5-41aa-a587-27d974e92273","id":"QR_1bde0ede-76a5-41aa-a587-27d974e92273","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:40:13][350886065540815][10074 ms][DEBUG] proc_open done in 6888 ms; code=255; res.len=3343 [2025-08-25 18:40:13][350886065540815][10074 ms][DEBUG] END runCmdUntilRes#1 in 6888 ms [2025-08-25 18:40:13][350886065540815][10074 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:40:16][351317842021803][0 ms][INFO] === Request start === [2025-08-25 18:40:16][351317842021803][1 ms][DEBUG] START check_scloud [2025-08-25 18:40:16][351317842021803][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:40:16][351317842021803][433 ms][DEBUG] SU: done in 432 ms; outu0_a118 28899 24659 23766140 108388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:40:16][351317842021803][433 ms][DEBUG] targetPkg: running [2025-08-25 18:40:16][351317842021803][433 ms][DEBUG] END check_scloud in 432 ms [2025-08-25 18:40:16][351317842021803][433 ms][DEBUG] START check_boot_completed [2025-08-25 18:40:16][351317842021803][433 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:40:16][351317842021803][480 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:40:16][351317842021803][480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:40:16][351317842021803][542 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:40:16][351317842021803][542 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:40:16][351317842021803][542 ms][DEBUG] START check_internet [2025-08-25 18:40:16][351317842021803][542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:40:17][351317842021803][995 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=229 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 229.990/229.990/229.990/0.000 ms\n [2025-08-25 18:40:17][351317842021803][995 ms][DEBUG] check_internet: online [2025-08-25 18:40:17][351317842021803][995 ms][DEBUG] END check_internet in 453 ms [2025-08-25 18:40:17][351317842021803][995 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:40:17][351317842021803][995 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317842021803\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5158\"}'\'' -e'"" [2025-08-25 18:40:17][351317842021803][995 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:40:17][351317842021803][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317842021803\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5158\"}'\'' -e'"" [2025-08-25 18:40:21][351317842021803][5728 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa070e2c-d265-4a53-bdab-f968281cdfb3","id":"QR_fa070e2c-d265-4a53-bdab-f968281cdfb3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:40:21][351317842021803][5884 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-08-25 18:40:21][351317842021803][5884 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-08-25 18:40:21][351317842021803][5884 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:41:04][353910110815712][0 ms][INFO] === Request start === [2025-08-25 18:41:04][353910110815712][0 ms][DEBUG] START check_scloud [2025-08-25 18:41:04][353910110815712][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:41:05][353910110815712][394 ms][DEBUG] SU: done in 394 ms; outu0_a118 28899 24659 23806096 57896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:41:05][353910110815712][394 ms][DEBUG] targetPkg: running [2025-08-25 18:41:05][353910110815712][394 ms][DEBUG] END check_scloud in 394 ms [2025-08-25 18:41:05][353910110815712][394 ms][DEBUG] START check_boot_completed [2025-08-25 18:41:05][353910110815712][394 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:41:05][353910110815712][426 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:41:05][353910110815712][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:41:05][353910110815712][473 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:41:05][353910110815712][473 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:41:05][353910110815712][473 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:41:05][353910110815712][473 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353910110815712\",\"model\":\"SM-G985F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TCE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3037\"}'\'' -e'"" [2025-08-25 18:41:05][353910110815712][473 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:41:05][353910110815712][473 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353910110815712\",\"model\":\"SM-G985F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TCE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3037\"}'\'' -e'"" [2025-08-25 18:41:11][353910110815712][6471 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_641efc4f-5927-4025-8e40-7c6722a6db46","id":"QR_641efc4f-5927-4025-8e40-7c6722a6db46","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:41:11][353910110815712][6627 ms][DEBUG] proc_open done in 6155 ms; code=255; res.len=3343 [2025-08-25 18:41:11][353910110815712][6628 ms][DEBUG] END runCmdUntilRes#1 in 6155 ms [2025-08-25 18:41:11][353910110815712][6628 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:43:03][351786692883530][1 ms][INFO] === Request start === [2025-08-25 18:43:03][351786692883530][1 ms][DEBUG] START check_scloud [2025-08-25 18:43:03][351786692883530][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:43:03][351786692883530][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 28899 24659 23908456 78960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:43:03][351786692883530][333 ms][DEBUG] targetPkg: running [2025-08-25 18:43:03][351786692883530][333 ms][DEBUG] END check_scloud in 332 ms [2025-08-25 18:43:03][351786692883530][333 ms][DEBUG] START check_boot_completed [2025-08-25 18:43:03][351786692883530][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:43:03][351786692883530][379 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:43:03][351786692883530][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:43:03][351786692883530][442 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:43:03][351786692883530][442 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:43:03][351786692883530][442 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:43:03][351786692883530][442 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692883530\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1144\"}'\'' -e'"" [2025-08-25 18:43:03][351786692883530][442 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:43:03][351786692883530][442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692883530\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1144\"}'\'' -e'"" [2025-08-25 18:43:08][351786692883530][4816 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8547940-a615-44b8-b11e-a837a2412269","id":"QR_c8547940-a615-44b8-b11e-a837a2412269","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:43:08][351786692883530][4972 ms][DEBUG] proc_open done in 4529 ms; code=255; res.len=3343 [2025-08-25 18:43:08][351786692883530][4972 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-25 18:43:08][351786692883530][4972 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:43:10][356513708544590][0 ms][INFO] === Request start === [2025-08-25 18:43:10][356513708544590][1 ms][DEBUG] START check_scloud [2025-08-25 18:43:10][356513708544590][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:43:11][356513708544590][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 28899 24659 24038704 95916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:43:11][356513708544590][329 ms][DEBUG] targetPkg: running [2025-08-25 18:43:11][356513708544590][329 ms][DEBUG] END check_scloud in 329 ms [2025-08-25 18:43:11][356513708544590][329 ms][DEBUG] START check_boot_completed [2025-08-25 18:43:11][356513708544590][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:43:11][356513708544590][360 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:43:11][356513708544590][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:43:11][356513708544590][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:43:11][356513708544590][407 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:43:11][356513708544590][407 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:43:11][356513708544590][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513708544590\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7716\"}'\'' -e'"" [2025-08-25 18:43:11][356513708544590][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:43:11][356513708544590][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513708544590\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7716\"}'\'' -e'"" [2025-08-25 18:43:15][356513708544590][4391 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6284aeb3-9b7e-4419-9621-d3d6ab37e31f","id":"QR_6284aeb3-9b7e-4419-9621-d3d6ab37e31f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:43:15][356513708544590][4547 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-25 18:43:15][356513708544590][4547 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-08-25 18:43:15][356513708544590][4547 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:44:04][350635070827083][0 ms][INFO] === Request start === [2025-08-25 18:44:04][350635070827083][1 ms][DEBUG] START check_scloud [2025-08-25 18:44:04][350635070827083][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:44:04][350635070827083][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 28899 24659 24142128 107904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:44:04][350635070827083][317 ms][DEBUG] targetPkg: running [2025-08-25 18:44:04][350635070827083][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 18:44:04][350635070827083][317 ms][DEBUG] START check_boot_completed [2025-08-25 18:44:04][350635070827083][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:44:04][350635070827083][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:44:04][350635070827083][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:44:04][350635070827083][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:44:04][350635070827083][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:44:04][350635070827083][426 ms][DEBUG] START check_internet [2025-08-25 18:44:04][350635070827083][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:44:05][350635070827083][911 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.994/201.994/201.994/0.000 ms\n [2025-08-25 18:44:05][350635070827083][911 ms][DEBUG] check_internet: online [2025-08-25 18:44:05][350635070827083][911 ms][DEBUG] END check_internet in 485 ms [2025-08-25 18:44:05][350635070827083][911 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:44:05][350635070827083][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635070827083\",\"model\":\"SM-X816B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2908\"}'\'' -e'"" [2025-08-25 18:44:05][350635070827083][911 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:44:05][350635070827083][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635070827083\",\"model\":\"SM-X816B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2908\"}'\'' -e'"" [2025-08-25 18:44:09][350635070827083][5440 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9794550c-00ef-40df-9922-e1c08f72c553","id":"QR_9794550c-00ef-40df-9922-e1c08f72c553","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:44:09][350635070827083][5597 ms][DEBUG] proc_open done in 4685 ms; code=255; res.len=3343 [2025-08-25 18:44:09][350635070827083][5597 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-25 18:44:09][350635070827083][5597 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:44:12][352665185959719][0 ms][INFO] === Request start === [2025-08-25 18:44:12][352665185959719][1 ms][DEBUG] START check_scloud [2025-08-25 18:44:12][352665185959719][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:44:12][352665185959719][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 28899 24659 24276408 119528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:44:12][352665185959719][272 ms][DEBUG] targetPkg: running [2025-08-25 18:44:12][352665185959719][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-25 18:44:12][352665185959719][272 ms][DEBUG] START check_boot_completed [2025-08-25 18:44:12][352665185959719][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:44:12][352665185959719][303 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:44:12][352665185959719][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:44:12][352665185959719][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:44:12][352665185959719][350 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:44:12][352665185959719][350 ms][DEBUG] START check_internet [2025-08-25 18:44:12][352665185959719][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:44:12][352665185959719][647 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.435/194.435/194.435/0.000 ms\n [2025-08-25 18:44:12][352665185959719][647 ms][DEBUG] check_internet: online [2025-08-25 18:44:12][352665185959719][647 ms][DEBUG] END check_internet in 297 ms [2025-08-25 18:44:12][352665185959719][647 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:44:12][352665185959719][647 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665185959719\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1915\"}'\'' -e'"" [2025-08-25 18:44:12][352665185959719][647 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:44:12][352665185959719][647 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665185959719\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1915\"}'\'' -e'"" [2025-08-25 18:44:16][352665185959719][4552 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ccf677a-b0df-4ce5-9396-9588f371b744","id":"QR_4ccf677a-b0df-4ce5-9396-9588f371b744","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:44:17][352665185959719][4708 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-25 18:44:17][352665185959719][4708 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-25 18:44:17][352665185959719][4708 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:45:04][352233851195454][1 ms][INFO] === Request start === [2025-08-25 18:45:04][352233851195454][1 ms][DEBUG] START check_scloud [2025-08-25 18:45:04][352233851195454][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:45:04][352233851195454][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 28899 24659 24375736 130704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:45:04][352233851195454][307 ms][DEBUG] targetPkg: running [2025-08-25 18:45:04][352233851195454][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 18:45:04][352233851195454][307 ms][DEBUG] START check_boot_completed [2025-08-25 18:45:04][352233851195454][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:45:04][352233851195454][352 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 18:45:04][352233851195454][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:45:04][352233851195454][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:45:04][352233851195454][399 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 18:45:04][352233851195454][399 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:45:04][352233851195454][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352233851195454\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9232\"}'\'' -e'"" [2025-08-25 18:45:04][352233851195454][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:45:04][352233851195454][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352233851195454\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9232\"}'\'' -e'"" [2025-08-25 18:45:09][352233851195454][5320 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_530edbc4-f986-45c7-9c2a-81f063c52b07","id":"QR_530edbc4-f986-45c7-9c2a-81f063c52b07","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:45:09][352233851195454][5476 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-08-25 18:45:09][352233851195454][5476 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-08-25 18:45:09][352233851195454][5476 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:46:03][351632918754859][1 ms][INFO] === Request start === [2025-08-25 18:46:03][351632918754859][1 ms][DEBUG] START check_scloud [2025-08-25 18:46:03][351632918754859][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:46:03][351632918754859][259 ms][DEBUG] SU: done in 257 ms; outu0_a118 28899 24659 24506012 142900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:46:03][351632918754859][259 ms][DEBUG] targetPkg: running [2025-08-25 18:46:03][351632918754859][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-25 18:46:03][351632918754859][259 ms][DEBUG] START check_boot_completed [2025-08-25 18:46:03][351632918754859][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:46:03][351632918754859][304 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 18:46:03][351632918754859][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:46:03][351632918754859][367 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:46:03][351632918754859][367 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 18:46:03][351632918754859][367 ms][DEBUG] START check_internet [2025-08-25 18:46:03][351632918754859][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:46:04][351632918754859][882 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.999/200.999/200.999/0.000 ms\n [2025-08-25 18:46:04][351632918754859][882 ms][DEBUG] check_internet: online [2025-08-25 18:46:04][351632918754859][882 ms][DEBUG] END check_internet in 515 ms [2025-08-25 18:46:04][351632918754859][882 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:46:04][351632918754859][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918754859\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1113\"}'\'' -e'"" [2025-08-25 18:46:04][351632918754859][883 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:46:04][351632918754859][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918754859\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1113\"}'\'' -e'"" [2025-08-25 18:46:08][351632918754859][4725 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3cb2c838-042d-41e8-a2db-d158867539a4","id":"QR_3cb2c838-042d-41e8-a2db-d158867539a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:46:08][351632918754859][4881 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-25 18:46:08][351632918754859][4881 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-08-25 18:46:08][351632918754859][4881 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:48:03][355036113759679][1 ms][INFO] === Request start === [2025-08-25 18:48:03][355036113759679][1 ms][DEBUG] START check_scloud [2025-08-25 18:48:03][355036113759679][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:48:03][355036113759679][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 28899 24659 24628096 153632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:48:03][355036113759679][317 ms][DEBUG] targetPkg: running [2025-08-25 18:48:03][355036113759679][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 18:48:03][355036113759679][317 ms][DEBUG] START check_boot_completed [2025-08-25 18:48:03][355036113759679][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:48:03][355036113759679][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:48:03][355036113759679][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:48:03][355036113759679][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:48:03][355036113759679][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:48:03][355036113759679][426 ms][DEBUG] START check_internet [2025-08-25 18:48:03][355036113759679][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:48:04][355036113759679][895 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=333 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 333.740/333.740/333.740/0.000 ms\n [2025-08-25 18:48:04][355036113759679][895 ms][DEBUG] check_internet: online [2025-08-25 18:48:04][355036113759679][895 ms][DEBUG] END check_internet in 468 ms [2025-08-25 18:48:04][355036113759679][895 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:48:04][355036113759679][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355036113759679\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7590\"}'\'' -e'"" [2025-08-25 18:48:04][355036113759679][895 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:48:04][355036113759679][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355036113759679\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7590\"}'\'' -e'"" [2025-08-25 18:48:08][355036113759679][5441 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7d4d741-4b81-4bde-a755-54e2b8b74798","id":"QR_b7d4d741-4b81-4bde-a755-54e2b8b74798","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:48:09][355036113759679][5597 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-08-25 18:48:09][355036113759679][5597 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-25 18:48:09][355036113759679][5597 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:50:30][350176951109051][1 ms][INFO] === Request start === [2025-08-25 18:50:30][350176951109051][1 ms][DEBUG] START check_scloud [2025-08-25 18:50:30][350176951109051][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:50:31][350176951109051][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 28899 24659 24776804 165764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:50:31][350176951109051][317 ms][DEBUG] targetPkg: running [2025-08-25 18:50:31][350176951109051][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 18:50:31][350176951109051][317 ms][DEBUG] START check_boot_completed [2025-08-25 18:50:31][350176951109051][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:50:31][350176951109051][348 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:50:31][350176951109051][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:50:31][350176951109051][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:50:31][350176951109051][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:50:31][350176951109051][395 ms][DEBUG] START check_internet [2025-08-25 18:50:31][350176951109051][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:50:31][350176951109051][864 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.006/200.006/200.006/0.000 ms\n [2025-08-25 18:50:31][350176951109051][864 ms][DEBUG] check_internet: online [2025-08-25 18:50:31][350176951109051][864 ms][DEBUG] END check_internet in 468 ms [2025-08-25 18:50:31][350176951109051][864 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:50:31][350176951109051][864 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176951109051\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9951\"}'\'' -e'"" [2025-08-25 18:50:31][350176951109051][864 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:50:31][350176951109051][864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176951109051\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9951\"}'\'' -e'"" [2025-08-25 18:50:35][350176951109051][4910 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:50:35][350176951109051][5066 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=107 [2025-08-25 18:50:35][350176951109051][5066 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 18:50:35][350176951109051][5066 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:50:36][][0 ms][INFO] === Request start === [2025-08-25 18:50:36][][1 ms][DEBUG] START check_scloud [2025-08-25 18:50:36][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:50:36][][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 28899 24659 24913260 177036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:50:36][][308 ms][DEBUG] targetPkg: running [2025-08-25 18:50:36][][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 18:50:36][][308 ms][DEBUG] START check_boot_completed [2025-08-25 18:50:36][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:50:36][][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:50:36][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:50:36][][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:50:36][][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:50:36][][386 ms][DEBUG] START check_internet [2025-08-25 18:50:36][][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:50:36][][636 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=147 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 147.060/147.060/147.060/0.000 ms\n [2025-08-25 18:50:36][][636 ms][DEBUG] check_internet: online [2025-08-25 18:50:36][][636 ms][DEBUG] END check_internet in 250 ms [2025-08-25 18:50:36][][636 ms][DEBUG] rawBody.length=1129 [2025-08-25 18:50:36][][636 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX51B7GJV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6703\"}'\'' -e'"" [2025-08-25 18:50:36][][636 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:50:36][][636 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX51B7GJV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6703\"}'\'' -e'"" [2025-08-25 18:50:41][][4994 ms][DEBUG] proc_open done in 4358 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 18:50:41][][4994 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-25 18:50:41][][4994 ms][WARN] Detected error: Process with pid 28899 either refused to load frida-agent, or terminated during injection [2025-08-25 18:50:41][][4994 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 18:50:41][][5135 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 18:50:41][][5135 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 18:50:41][][5135 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 18:50:41][][5259 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 18:50:41][][5259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 18:50:41][][5416 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 18:50:43][][7431 ms][DEBUG] START check_boot_completed [2025-08-25 18:50:43][][7431 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:50:43][][7478 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:50:43][][7478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:50:43][][7525 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:50:43][][7525 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 18:50:46][][10539 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 18:50:46][][10539 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX51B7GJV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6703\"}'\'' -e'"" [2025-08-25 18:50:50][][14007 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:50:50][][14164 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=107 [2025-08-25 18:50:50][][14164 ms][DEBUG] END runCmdUntilRes#2 in 3624 ms [2025-08-25 18:50:50][][14164 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:50:52][350176951109051][0 ms][INFO] === Request start === [2025-08-25 18:50:52][350176951109051][1 ms][DEBUG] START check_scloud [2025-08-25 18:50:52][350176951109051][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:50:52][350176951109051][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 5914 24659 23694144 126116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:50:52][350176951109051][264 ms][DEBUG] targetPkg: running [2025-08-25 18:50:52][350176951109051][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-25 18:50:52][350176951109051][264 ms][DEBUG] START check_boot_completed [2025-08-25 18:50:52][350176951109051][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:50:52][350176951109051][295 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:50:52][350176951109051][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:50:52][350176951109051][342 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:50:52][350176951109051][342 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:50:52][350176951109051][342 ms][DEBUG] START check_internet [2025-08-25 18:50:52][350176951109051][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:50:52][350176951109051][701 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=235 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 235.852/235.852/235.852/0.000 ms\n [2025-08-25 18:50:52][350176951109051][701 ms][DEBUG] check_internet: online [2025-08-25 18:50:52][350176951109051][701 ms][DEBUG] END check_internet in 360 ms [2025-08-25 18:50:52][350176951109051][702 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:50:52][350176951109051][702 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176951109051\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2341\"}'\'' -e'"" [2025-08-25 18:50:52][350176951109051][702 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:50:52][350176951109051][702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176951109051\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2341\"}'\'' -e'"" [2025-08-25 18:50:57][350176951109051][5216 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-08-25 18:50:57][350176951109051][5372 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=93 [2025-08-25 18:50:57][350176951109051][5372 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-08-25 18:50:57][350176951109051][5372 ms][INFO] SUCCESS response from frida (len=93) [2025-08-25 18:50:57][][0 ms][INFO] === Request start === [2025-08-25 18:50:57][][1 ms][DEBUG] START check_scloud [2025-08-25 18:50:57][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:50:58][][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 5914 24659 23854036 139560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:50:58][][267 ms][DEBUG] targetPkg: running [2025-08-25 18:50:58][][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-25 18:50:58][][267 ms][DEBUG] START check_boot_completed [2025-08-25 18:50:58][][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:50:58][][314 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:50:58][][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:50:58][][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:50:58][][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:50:58][][360 ms][DEBUG] START check_internet [2025-08-25 18:50:58][][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:50:58][][626 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.054/174.054/174.054/0.000 ms\n [2025-08-25 18:50:58][][626 ms][DEBUG] check_internet: online [2025-08-25 18:50:58][][626 ms][DEBUG] END check_internet in 266 ms [2025-08-25 18:50:58][][626 ms][DEBUG] rawBody.length=1130 [2025-08-25 18:50:58][][626 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX51B7GJV\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6495\"}'\'' -e'"" [2025-08-25 18:50:58][][626 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:50:58][][626 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX51B7GJV\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6495\"}'\'' -e'"" [2025-08-25 18:51:02][][4453 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:51:02][][4609 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=107 [2025-08-25 18:51:02][][4609 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 18:51:02][][4609 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:51:30][350176951109051][0 ms][INFO] === Request start === [2025-08-25 18:51:30][350176951109051][1 ms][DEBUG] START check_scloud [2025-08-25 18:51:30][350176951109051][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:51:30][350176951109051][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 5914 24659 23871040 152112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:51:30][350176951109051][269 ms][DEBUG] targetPkg: running [2025-08-25 18:51:30][350176951109051][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-25 18:51:30][350176951109051][269 ms][DEBUG] START check_boot_completed [2025-08-25 18:51:30][350176951109051][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:51:30][350176951109051][316 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 18:51:30][350176951109051][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:51:30][350176951109051][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:51:30][350176951109051][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 18:51:30][350176951109051][362 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:51:30][350176951109051][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176951109051\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4942\"}'\'' -e'"" [2025-08-25 18:51:30][350176951109051][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:51:30][350176951109051][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176951109051\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4942\"}'\'' -e'"" [2025-08-25 18:51:35][350176951109051][5471 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:51:35][350176951109051][5627 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=107 [2025-08-25 18:51:35][350176951109051][5627 ms][DEBUG] END runCmdUntilRes#1 in 5265 ms [2025-08-25 18:51:35][350176951109051][5627 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:51:36][][0 ms][INFO] === Request start === [2025-08-25 18:51:36][][1 ms][DEBUG] START check_scloud [2025-08-25 18:51:36][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:51:36][][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 5914 24659 24022656 162776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:51:36][][287 ms][DEBUG] targetPkg: running [2025-08-25 18:51:36][][287 ms][DEBUG] END check_scloud in 287 ms [2025-08-25 18:51:36][][287 ms][DEBUG] START check_boot_completed [2025-08-25 18:51:36][][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:51:36][][334 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:51:36][][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:51:36][][397 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 18:51:36][][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:51:36][][397 ms][DEBUG] rawBody.length=1129 [2025-08-25 18:51:36][][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX51B7GJV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4987\"}'\'' -e'"" [2025-08-25 18:51:36][][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:51:36][][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX51B7GJV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4987\"}'\'' -e'"" [2025-08-25 18:51:40][][4349 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:51:40][][4505 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=107 [2025-08-25 18:51:40][][4505 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-25 18:51:40][][4505 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:51:42][350176951109051][0 ms][INFO] === Request start === [2025-08-25 18:51:42][350176951109051][1 ms][DEBUG] START check_scloud [2025-08-25 18:51:42][350176951109051][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:51:42][350176951109051][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 5914 24659 24169224 174056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:51:42][350176951109051][316 ms][DEBUG] targetPkg: running [2025-08-25 18:51:42][350176951109051][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 18:51:42][350176951109051][316 ms][DEBUG] START check_boot_completed [2025-08-25 18:51:42][350176951109051][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:51:42][350176951109051][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:51:42][350176951109051][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:51:42][350176951109051][409 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 18:51:42][350176951109051][410 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 18:51:42][350176951109051][410 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:51:42][350176951109051][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176951109051\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6953\"}'\'' -e'"" [2025-08-25 18:51:42][350176951109051][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:51:42][350176951109051][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176951109051\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6953\"}'\'' -e'"" [2025-08-25 18:51:48][350176951109051][6220 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"IMEI_EXIST_IN_DIFFERENT_ACCOUNT"}\r\n [2025-08-25 18:51:48][350176951109051][6377 ms][DEBUG] proc_open done in 5967 ms; code=255; res.len=93 [2025-08-25 18:51:48][350176951109051][6377 ms][DEBUG] END runCmdUntilRes#1 in 5967 ms [2025-08-25 18:51:48][350176951109051][6377 ms][INFO] SUCCESS response from frida (len=93) [2025-08-25 18:51:49][][0 ms][INFO] === Request start === [2025-08-25 18:51:49][][1 ms][DEBUG] START check_scloud [2025-08-25 18:51:49][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:51:49][][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 5914 24659 24334288 184860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:51:49][][302 ms][DEBUG] targetPkg: running [2025-08-25 18:51:49][][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 18:51:49][][303 ms][DEBUG] START check_boot_completed [2025-08-25 18:51:49][][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:51:49][][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:51:49][][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:51:49][][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:51:49][][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:51:49][][412 ms][DEBUG] rawBody.length=1130 [2025-08-25 18:51:49][][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX51B7GJV\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6472\"}'\'' -e'"" [2025-08-25 18:51:49][][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:51:49][][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX51B7GJV\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6472\"}'\'' -e'"" [2025-08-25 18:51:54][][5551 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:51:54][][5707 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=107 [2025-08-25 18:51:54][][5707 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-08-25 18:51:54][][5707 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 18:56:04][350722246642792][1 ms][INFO] === Request start === [2025-08-25 18:56:04][350722246642792][1 ms][DEBUG] START check_scloud [2025-08-25 18:56:04][350722246642792][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:56:04][350722246642792][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 5914 24659 24440884 196724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:56:04][350722246642792][287 ms][DEBUG] targetPkg: running [2025-08-25 18:56:04][350722246642792][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-25 18:56:04][350722246642792][288 ms][DEBUG] START check_boot_completed [2025-08-25 18:56:04][350722246642792][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:56:04][350722246642792][319 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:56:04][350722246642792][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:56:04][350722246642792][381 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 18:56:04][350722246642792][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 18:56:04][350722246642792][381 ms][DEBUG] START check_internet [2025-08-25 18:56:04][350722246642792][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:56:04][350722246642792][772 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.055/198.055/198.055/0.000 ms\n [2025-08-25 18:56:04][350722246642792][772 ms][DEBUG] check_internet: online [2025-08-25 18:56:04][350722246642792][772 ms][DEBUG] END check_internet in 391 ms [2025-08-25 18:56:04][350722246642792][772 ms][DEBUG] rawBody.length=1148 [2025-08-25 18:56:04][350722246642792][772 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350722246642792\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5516\"}'\'' -e'"" [2025-08-25 18:56:04][350722246642792][772 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:56:04][350722246642792][772 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350722246642792\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5516\"}'\'' -e'"" [2025-08-25 18:56:09][350722246642792][5083 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7b4b1f6-3a99-4cd8-9508-146eb705c55d","id":"QR_a7b4b1f6-3a99-4cd8-9508-146eb705c55d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:56:09][350722246642792][5239 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-25 18:56:09][350722246642792][5239 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-25 18:56:09][350722246642792][5239 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:58:03][355163180038082][0 ms][INFO] === Request start === [2025-08-25 18:58:03][355163180038082][1 ms][DEBUG] START check_scloud [2025-08-25 18:58:03][355163180038082][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:58:03][355163180038082][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 5914 24659 24560792 208372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:58:03][355163180038082][304 ms][DEBUG] targetPkg: running [2025-08-25 18:58:03][355163180038082][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 18:58:03][355163180038082][304 ms][DEBUG] START check_boot_completed [2025-08-25 18:58:03][355163180038082][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:58:03][355163180038082][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:58:03][355163180038082][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:58:03][355163180038082][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:58:03][355163180038082][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:58:03][355163180038082][413 ms][DEBUG] START check_internet [2025-08-25 18:58:03][355163180038082][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 18:58:04][355163180038082][756 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.663/228.663/228.663/0.000 ms\n [2025-08-25 18:58:04][355163180038082][757 ms][DEBUG] check_internet: online [2025-08-25 18:58:04][355163180038082][757 ms][DEBUG] END check_internet in 344 ms [2025-08-25 18:58:04][355163180038082][757 ms][DEBUG] rawBody.length=1149 [2025-08-25 18:58:04][355163180038082][757 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355163180038082\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8196\"}'\'' -e'"" [2025-08-25 18:58:04][355163180038082][757 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:58:04][355163180038082][757 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355163180038082\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8196\"}'\'' -e'"" [2025-08-25 18:58:10][355163180038082][7239 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f410c38f-b4a0-4ef9-b4c8-6fbaa29258a5","id":"QR_f410c38f-b4a0-4ef9-b4c8-6fbaa29258a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 18:58:10][355163180038082][7395 ms][DEBUG] proc_open done in 6638 ms; code=255; res.len=3343 [2025-08-25 18:58:10][355163180038082][7396 ms][DEBUG] END runCmdUntilRes#1 in 6639 ms [2025-08-25 18:58:10][355163180038082][7396 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 18:59:02][355355257924422][1 ms][INFO] === Request start === [2025-08-25 18:59:02][355355257924422][1 ms][DEBUG] START check_scloud [2025-08-25 18:59:02][355355257924422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:59:02][355355257924422][279 ms][DEBUG] SU: done in 277 ms; outu0_a118 5914 24659 24723708 217936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:59:02][355355257924422][279 ms][DEBUG] targetPkg: running [2025-08-25 18:59:02][355355257924422][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-25 18:59:02][355355257924422][279 ms][DEBUG] START check_boot_completed [2025-08-25 18:59:02][355355257924422][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:59:02][355355257924422][325 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 18:59:02][355355257924422][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:59:02][355355257924422][388 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 18:59:02][355355257924422][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 18:59:02][355355257924422][388 ms][DEBUG] rawBody.length=1147 [2025-08-25 18:59:02][355355257924422][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924422\",\"model\":\"SM-X205\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8674\"}'\'' -e'"" [2025-08-25 18:59:02][355355257924422][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:59:02][355355257924422][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924422\",\"model\":\"SM-X205\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8674\"}'\'' -e'"" [2025-08-25 18:59:06][355355257924422][4340 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-25 18:59:06][355355257924422][4496 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=115 [2025-08-25 18:59:06][355355257924422][4496 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-25 18:59:06][355355257924422][4496 ms][INFO] SUCCESS response from frida (len=115) [2025-08-25 18:59:07][][0 ms][INFO] === Request start === [2025-08-25 18:59:07][][1 ms][DEBUG] START check_scloud [2025-08-25 18:59:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 18:59:07][][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 5914 24659 24888836 229784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 18:59:07][][308 ms][DEBUG] targetPkg: running [2025-08-25 18:59:07][][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 18:59:07][][308 ms][DEBUG] START check_boot_completed [2025-08-25 18:59:07][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 18:59:07][][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 18:59:07][][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 18:59:07][][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 18:59:07][][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 18:59:07][][386 ms][DEBUG] rawBody.length=1128 [2025-08-25 18:59:07][][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X205\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTC049F8M\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2949\"}'\'' -e'"" [2025-08-25 18:59:07][][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 18:59:07][][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X205\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTC049F8M\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2949\"}'\'' -e'"" [2025-08-25 18:59:10][][3932 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 18:59:11][][4089 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=107 [2025-08-25 18:59:11][][4089 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-25 18:59:11][][4089 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 19:00:04][350350680727034][0 ms][INFO] === Request start === [2025-08-25 19:00:04][350350680727034][1 ms][DEBUG] START check_scloud [2025-08-25 19:00:04][350350680727034][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:00:04][350350680727034][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 5914 24659 25029320 240872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:00:04][350350680727034][311 ms][DEBUG] targetPkg: running [2025-08-25 19:00:04][350350680727034][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 19:00:04][350350680727034][311 ms][DEBUG] START check_boot_completed [2025-08-25 19:00:04][350350680727034][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:00:04][350350680727034][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:00:04][350350680727034][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:00:04][350350680727034][405 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 19:00:04][350350680727034][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:00:04][350350680727034][406 ms][DEBUG] START check_internet [2025-08-25 19:00:04][350350680727034][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:00:05][350350680727034][920 ms][DEBUG] SU: done in 514 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=400 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 400.231/400.231/400.231/0.000 ms\n [2025-08-25 19:00:05][350350680727034][920 ms][DEBUG] check_internet: online [2025-08-25 19:00:05][350350680727034][920 ms][DEBUG] END check_internet in 514 ms [2025-08-25 19:00:05][350350680727034][920 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:00:05][350350680727034][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350350680727034\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3197\"}'\'' -e'"" [2025-08-25 19:00:05][350350680727034][920 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:00:05][350350680727034][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350350680727034\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3197\"}'\'' -e'"" [2025-08-25 19:00:09][350350680727034][4950 ms][DEBUG] proc_open done in 4030 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 19:00:09][350350680727034][4950 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-25 19:00:09][350350680727034][4950 ms][WARN] Detected error: Process with pid 5914 either refused to load frida-agent, or terminated during injection [2025-08-25 19:00:09][350350680727034][4950 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 19:00:09][350350680727034][5092 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 19:00:09][350350680727034][5092 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 19:00:09][350350680727034][5092 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:00:09][350350680727034][5216 ms][DEBUG] SU: done in 124 ms; out [2025-08-25 19:00:09][350350680727034][5216 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:00:09][350350680727034][5388 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:00:11][350350680727034][7403 ms][DEBUG] START check_boot_completed [2025-08-25 19:00:11][350350680727034][7403 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:00:12][350350680727034][7449 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:00:12][350350680727034][7450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:00:12][350350680727034][7496 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:00:12][350350680727034][7496 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:00:15][350350680727034][10511 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 19:00:15][350350680727034][10511 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350350680727034\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3197\"}'\'' -e'"" [2025-08-25 19:00:21][350350680727034][16510 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b812cd86-ea91-4ea7-bdd3-be166ccc25ee","id":"QR_b812cd86-ea91-4ea7-bdd3-be166ccc25ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:00:21][350350680727034][16666 ms][DEBUG] proc_open done in 6155 ms; code=255; res.len=3343 [2025-08-25 19:00:21][350350680727034][16666 ms][DEBUG] END runCmdUntilRes#2 in 6155 ms [2025-08-25 19:00:21][350350680727034][16666 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:00:25][352483849833100][0 ms][INFO] === Request start === [2025-08-25 19:00:25][352483849833100][1 ms][DEBUG] START check_scloud [2025-08-25 19:00:25][352483849833100][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:00:25][352483849833100][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 7691 24659 23684956 126612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:00:25][352483849833100][302 ms][DEBUG] targetPkg: running [2025-08-25 19:00:25][352483849833100][302 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 19:00:25][352483849833100][302 ms][DEBUG] START check_boot_completed [2025-08-25 19:00:25][352483849833100][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:00:25][352483849833100][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:00:25][352483849833100][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:00:25][352483849833100][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:00:25][352483849833100][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:00:25][352483849833100][412 ms][DEBUG] START check_internet [2025-08-25 19:00:25][352483849833100][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:00:25][352483849833100][724 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.871/201.871/201.871/0.000 ms\n [2025-08-25 19:00:25][352483849833100][724 ms][DEBUG] check_internet: online [2025-08-25 19:00:25][352483849833100][724 ms][DEBUG] END check_internet in 313 ms [2025-08-25 19:00:25][352483849833100][724 ms][DEBUG] rawBody.length=1147 [2025-08-25 19:00:25][352483849833100][724 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352483849833100\",\"model\":\"SM-X115\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3701\"}'\'' -e'"" [2025-08-25 19:00:25][352483849833100][725 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:00:25][352483849833100][725 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352483849833100\",\"model\":\"SM-X115\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3701\"}'\'' -e'"" [2025-08-25 19:00:29][352483849833100][4770 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1df175ed-586a-4253-a579-e51079af9415","id":"QR_1df175ed-586a-4253-a579-e51079af9415","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:00:30][352483849833100][4926 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-25 19:00:30][352483849833100][4926 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 19:00:30][352483849833100][4926 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:01:04][352001416502583][1 ms][INFO] === Request start === [2025-08-25 19:01:04][352001416502583][1 ms][DEBUG] START check_scloud [2025-08-25 19:01:04][352001416502583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:01:04][352001416502583][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 7691 24659 23786196 140300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:01:04][352001416502583][262 ms][DEBUG] targetPkg: running [2025-08-25 19:01:04][352001416502583][263 ms][DEBUG] END check_scloud in 261 ms [2025-08-25 19:01:04][352001416502583][263 ms][DEBUG] START check_boot_completed [2025-08-25 19:01:04][352001416502583][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:01:04][352001416502583][309 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:01:04][352001416502583][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:01:04][352001416502583][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:01:04][352001416502583][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:01:04][352001416502583][356 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:01:04][352001416502583][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001416502583\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7283\"}'\'' -e'"" [2025-08-25 19:01:04][352001416502583][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:01:04][352001416502583][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001416502583\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7283\"}'\'' -e'"" [2025-08-25 19:01:09][352001416502583][4402 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1420983-8c38-4eba-8dfc-71e4dd3739a6","id":"QR_d1420983-8c38-4eba-8dfc-71e4dd3739a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:01:09][352001416502583][4558 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-25 19:01:09][352001416502583][4558 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 19:01:09][352001416502583][4558 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:01:10][352649113610362][0 ms][INFO] === Request start === [2025-08-25 19:01:10][352649113610362][1 ms][DEBUG] START check_scloud [2025-08-25 19:01:10][352649113610362][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:01:11][352649113610362][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 7691 24659 23923668 151876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:01:11][352649113610362][297 ms][DEBUG] targetPkg: running [2025-08-25 19:01:11][352649113610362][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 19:01:11][352649113610362][297 ms][DEBUG] START check_boot_completed [2025-08-25 19:01:11][352649113610362][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:01:11][352649113610362][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:01:11][352649113610362][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:01:11][352649113610362][406 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 19:01:11][352649113610362][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:01:11][352649113610362][406 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:01:11][352649113610362][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352649113610362\",\"model\":\"SM-G988N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2186\"}'\'' -e'"" [2025-08-25 19:01:11][352649113610362][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:01:11][352649113610362][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352649113610362\",\"model\":\"SM-G988N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2186\"}'\'' -e'"" [2025-08-25 19:01:15][352649113610362][4296 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b82b0a7f-d4d0-4562-8602-110d55f3d1bc","id":"QR_b82b0a7f-d4d0-4562-8602-110d55f3d1bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:01:15][352649113610362][4452 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-25 19:01:15][352649113610362][4452 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-25 19:01:15][352649113610362][4452 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:01:17][350178739150365][0 ms][INFO] === Request start === [2025-08-25 19:01:17][350178739150365][1 ms][DEBUG] START check_scloud [2025-08-25 19:01:17][350178739150365][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:01:17][350178739150365][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 7691 24659 24049692 161656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:01:17][350178739150365][269 ms][DEBUG] targetPkg: running [2025-08-25 19:01:17][350178739150365][269 ms][DEBUG] END check_scloud in 269 ms [2025-08-25 19:01:17][350178739150365][269 ms][DEBUG] START check_boot_completed [2025-08-25 19:01:17][350178739150365][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:01:17][350178739150365][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:01:17][350178739150365][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:01:17][350178739150365][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:01:17][350178739150365][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:01:17][350178739150365][363 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:01:17][350178739150365][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739150365\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5133\"}'\'' -e'"" [2025-08-25 19:01:17][350178739150365][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:01:17][350178739150365][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739150365\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5133\"}'\'' -e'"" [2025-08-25 19:01:22][350178739150365][4611 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9c8aeb2-420d-40a6-90dd-898e18617ce2","id":"QR_c9c8aeb2-420d-40a6-90dd-898e18617ce2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:01:22][350178739150365][4768 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3343 [2025-08-25 19:01:22][350178739150365][4768 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-25 19:01:22][350178739150365][4768 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:02:03][356544395300954][0 ms][INFO] === Request start === [2025-08-25 19:02:03][356544395300954][1 ms][DEBUG] START check_scloud [2025-08-25 19:02:03][356544395300954][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:02:04][356544395300954][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 7691 24659 24177720 171156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:02:04][356544395300954][308 ms][DEBUG] targetPkg: running [2025-08-25 19:02:04][356544395300954][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 19:02:04][356544395300954][308 ms][DEBUG] START check_boot_completed [2025-08-25 19:02:04][356544395300954][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:02:04][356544395300954][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:02:04][356544395300954][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:02:04][356544395300954][433 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 19:02:04][356544395300954][433 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 19:02:04][356544395300954][433 ms][DEBUG] START check_internet [2025-08-25 19:02:04][356544395300954][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:02:04][356544395300954][870 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.633/199.633/199.633/0.000 ms\n [2025-08-25 19:02:04][356544395300954][870 ms][DEBUG] check_internet: online [2025-08-25 19:02:04][356544395300954][871 ms][DEBUG] END check_internet in 438 ms [2025-08-25 19:02:04][356544395300954][871 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:02:04][356544395300954][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544395300954\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5195\"}'\'' -e'"" [2025-08-25 19:02:04][356544395300954][871 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:02:04][356544395300954][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544395300954\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5195\"}'\'' -e'"" [2025-08-25 19:02:11][356544395300954][7666 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f343b5d-4c21-48d1-b93c-906feb831b3f","id":"QR_5f343b5d-4c21-48d1-b93c-906feb831b3f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:02:11][356544395300954][7822 ms][DEBUG] proc_open done in 6951 ms; code=255; res.len=3343 [2025-08-25 19:02:11][356544395300954][7822 ms][DEBUG] END runCmdUntilRes#1 in 6951 ms [2025-08-25 19:02:11][356544395300954][7822 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:03:02][351007339756322][0 ms][INFO] === Request start === [2025-08-25 19:03:02][351007339756322][1 ms][DEBUG] START check_scloud [2025-08-25 19:03:02][351007339756322][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:03:02][351007339756322][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 7691 24659 24329296 182468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:03:02][351007339756322][319 ms][DEBUG] targetPkg: running [2025-08-25 19:03:02][351007339756322][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 19:03:02][351007339756322][319 ms][DEBUG] START check_boot_completed [2025-08-25 19:03:02][351007339756322][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:03:02][351007339756322][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:03:02][351007339756322][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:03:02][351007339756322][414 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 19:03:02][351007339756322][414 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 19:03:02][351007339756322][414 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:03:02][351007339756322][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007339756322\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7646\"}'\'' -e'"" [2025-08-25 19:03:02][351007339756322][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:03:02][351007339756322][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007339756322\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7646\"}'\'' -e'"" [2025-08-25 19:03:07][351007339756322][5005 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc300149-955c-4055-9127-61e29e7eeaa5","id":"QR_fc300149-955c-4055-9127-61e29e7eeaa5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:03:07][351007339756322][5161 ms][DEBUG] proc_open done in 4746 ms; code=255; res.len=3343 [2025-08-25 19:03:07][351007339756322][5161 ms][DEBUG] END runCmdUntilRes#1 in 4746 ms [2025-08-25 19:03:07][351007339756322][5161 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:04:02][352600228952793][1 ms][INFO] === Request start === [2025-08-25 19:04:02][352600228952793][1 ms][DEBUG] START check_scloud [2025-08-25 19:04:02][352600228952793][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:04:02][352600228952793][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 7691 24659 24453428 194528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:04:02][352600228952793][260 ms][DEBUG] targetPkg: running [2025-08-25 19:04:02][352600228952793][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 19:04:02][352600228952793][260 ms][DEBUG] START check_boot_completed [2025-08-25 19:04:02][352600228952793][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:04:02][352600228952793][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:04:02][352600228952793][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:04:02][352600228952793][355 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 19:04:02][352600228952793][355 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 19:04:02][352600228952793][355 ms][DEBUG] START check_internet [2025-08-25 19:04:02][352600228952793][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:04:03][352600228952793][697 ms][DEBUG] SU: done in 342 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.711/201.711/201.711/0.000 ms\n [2025-08-25 19:04:03][352600228952793][697 ms][DEBUG] check_internet: online [2025-08-25 19:04:03][352600228952793][697 ms][DEBUG] END check_internet in 342 ms [2025-08-25 19:04:03][352600228952793][697 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:04:03][352600228952793][697 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228952793\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6888\"}'\'' -e'"" [2025-08-25 19:04:03][352600228952793][697 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:04:03][352600228952793][697 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228952793\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6888\"}'\'' -e'"" [2025-08-25 19:04:07][352600228952793][4805 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_806168c7-32d4-467e-8afc-a72d9c7f1c58","id":"QR_806168c7-32d4-467e-8afc-a72d9c7f1c58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:04:07][352600228952793][4961 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 19:04:07][352600228952793][4961 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 19:04:07][352600228952793][4961 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:05:04][350673971468004][0 ms][INFO] === Request start === [2025-08-25 19:05:04][350673971468004][0 ms][DEBUG] START check_scloud [2025-08-25 19:05:04][350673971468004][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:05:04][350673971468004][259 ms][DEBUG] SU: done in 259 ms; outu0_a118 7691 24659 24587800 205240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:05:04][350673971468004][259 ms][DEBUG] targetPkg: running [2025-08-25 19:05:04][350673971468004][259 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 19:05:04][350673971468004][259 ms][DEBUG] START check_boot_completed [2025-08-25 19:05:04][350673971468004][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:05:04][350673971468004][291 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 19:05:04][350673971468004][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:05:04][350673971468004][337 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:05:04][350673971468004][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 19:05:04][350673971468004][337 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:05:04][350673971468004][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350673971468004\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LEL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4400\"}'\'' -e'"" [2025-08-25 19:05:04][350673971468004][337 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:05:04][350673971468004][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350673971468004\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LEL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4400\"}'\'' -e'"" [2025-08-25 19:05:08][350673971468004][4555 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1da3e447-e407-41cb-8505-23698248132b","id":"QR_1da3e447-e407-41cb-8505-23698248132b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:05:08][350673971468004][4711 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-08-25 19:05:08][350673971468004][4711 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-25 19:05:08][350673971468004][4712 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:07:03][351272332174614][1 ms][INFO] === Request start === [2025-08-25 19:07:03][351272332174614][1 ms][DEBUG] START check_scloud [2025-08-25 19:07:03][351272332174614][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:07:03][351272332174614][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 7691 24659 24726268 216112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:07:03][351272332174614][251 ms][DEBUG] targetPkg: running [2025-08-25 19:07:03][351272332174614][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-25 19:07:03][351272332174614][251 ms][DEBUG] START check_boot_completed [2025-08-25 19:07:03][351272332174614][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:07:03][351272332174614][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:07:03][351272332174614][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:07:03][351272332174614][360 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:07:03][351272332174614][360 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:07:03][351272332174614][360 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:07:03][351272332174614][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272332174614\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5890\"}'\'' -e'"" [2025-08-25 19:07:03][351272332174614][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:07:03][351272332174614][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272332174614\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5890\"}'\'' -e'"" [2025-08-25 19:07:08][351272332174614][4875 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2666ad6-70a9-42be-a3cd-c48ab5f7c4c5","id":"QR_c2666ad6-70a9-42be-a3cd-c48ab5f7c4c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:07:08][351272332174614][5031 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-08-25 19:07:08][351272332174614][5031 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-08-25 19:07:08][351272332174614][5031 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:11:04][354261831034954][0 ms][INFO] === Request start === [2025-08-25 19:11:04][354261831034954][0 ms][DEBUG] START check_scloud [2025-08-25 19:11:04][354261831034954][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:11:04][354261831034954][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 7691 24659 24868704 227212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:11:04][354261831034954][293 ms][DEBUG] targetPkg: running [2025-08-25 19:11:04][354261831034954][293 ms][DEBUG] END check_scloud in 293 ms [2025-08-25 19:11:04][354261831034954][293 ms][DEBUG] START check_boot_completed [2025-08-25 19:11:04][354261831034954][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:11:05][354261831034954][324 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 19:11:05][354261831034954][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:11:05][354261831034954][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:11:05][354261831034954][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 19:11:05][354261831034954][371 ms][DEBUG] rawBody.length=1150 [2025-08-25 19:11:05][354261831034954][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261831034954\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1408\"}'\'' -e'"" [2025-08-25 19:11:05][354261831034954][371 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:11:05][354261831034954][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261831034954\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1408\"}'\'' -e'"" [2025-08-25 19:11:10][354261831034954][5729 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_117a976c-f5b9-44ad-b099-69eb0fa84be3","id":"QR_117a976c-f5b9-44ad-b099-69eb0fa84be3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:11:10][354261831034954][5885 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-25 19:11:10][354261831034954][5885 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-25 19:11:10][354261831034954][5885 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:12:04][353313360766059][0 ms][INFO] === Request start === [2025-08-25 19:12:04][353313360766059][1 ms][DEBUG] START check_scloud [2025-08-25 19:12:04][353313360766059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:12:04][353313360766059][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 7691 24659 25021384 236944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:12:04][353313360766059][251 ms][DEBUG] targetPkg: running [2025-08-25 19:12:04][353313360766059][251 ms][DEBUG] END check_scloud in 251 ms [2025-08-25 19:12:04][353313360766059][251 ms][DEBUG] START check_boot_completed [2025-08-25 19:12:04][353313360766059][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:12:04][353313360766059][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:12:04][353313360766059][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:12:04][353313360766059][392 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 19:12:04][353313360766059][392 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 19:12:04][353313360766059][392 ms][DEBUG] START check_internet [2025-08-25 19:12:04][353313360766059][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:12:05][353313360766059][907 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.541/202.541/202.541/0.000 ms\n [2025-08-25 19:12:05][353313360766059][907 ms][DEBUG] check_internet: online [2025-08-25 19:12:05][353313360766059][907 ms][DEBUG] END check_internet in 515 ms [2025-08-25 19:12:05][353313360766059][907 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:12:05][353313360766059][907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313360766059\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1558\"}'\'' -e'"" [2025-08-25 19:12:05][353313360766059][907 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:12:05][353313360766059][907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313360766059\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1558\"}'\'' -e'"" [2025-08-25 19:12:09][353313360766059][5235 ms][DEBUG] proc_open done in 4327 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-25 19:12:09][353313360766059][5235 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-25 19:12:09][353313360766059][5235 ms][WARN] Detected error: Process with pid 7691 either refused to load frida-agent, or terminated during injection [2025-08-25 19:12:09][353313360766059][5235 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 19:12:09][353313360766059][5391 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 19:12:09][353313360766059][5391 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 19:12:09][353313360766059][5391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:12:09][353313360766059][5531 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 19:12:09][353313360766059][5531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:12:10][353313360766059][5750 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:12:12][353313360766059][7765 ms][DEBUG] START check_boot_completed [2025-08-25 19:12:12][353313360766059][7765 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:12:12][353313360766059][7812 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:12:12][353313360766059][7812 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:12:12][353313360766059][7859 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:12:12][353313360766059][7859 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:12:15][353313360766059][10873 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 19:12:15][353313360766059][10874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313360766059\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1558\"}'\'' -e'"" [2025-08-25 19:12:21][353313360766059][16950 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4b7243d-ffcf-4b63-a191-a615d79191c0","id":"QR_a4b7243d-ffcf-4b63-a191-a615d79191c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:12:21][353313360766059][17106 ms][DEBUG] proc_open done in 6233 ms; code=255; res.len=3343 [2025-08-25 19:12:21][353313360766059][17106 ms][DEBUG] END runCmdUntilRes#2 in 6233 ms [2025-08-25 19:12:21][353313360766059][17107 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:13:05][354432553014769][1 ms][INFO] === Request start === [2025-08-25 19:13:05][354432553014769][1 ms][DEBUG] START check_scloud [2025-08-25 19:13:05][354432553014769][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:13:05][354432553014769][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 9416 24659 23663700 129716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:13:05][354432553014769][315 ms][DEBUG] targetPkg: running [2025-08-25 19:13:05][354432553014769][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 19:13:05][354432553014769][315 ms][DEBUG] START check_boot_completed [2025-08-25 19:13:05][354432553014769][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:13:05][354432553014769][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:13:05][354432553014769][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:13:05][354432553014769][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:13:05][354432553014769][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:13:05][354432553014769][408 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:13:05][354432553014769][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354432553014769\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8445\"}'\'' -e'"" [2025-08-25 19:13:05][354432553014769][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:13:05][354432553014769][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354432553014769\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8445\"}'\'' -e'"" [2025-08-25 19:13:10][354432553014769][5548 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1caec372-e781-4b03-87a1-9c3141b850e5","id":"QR_1caec372-e781-4b03-87a1-9c3141b850e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:13:10][354432553014769][5704 ms][DEBUG] proc_open done in 5296 ms; code=255; res.len=3343 [2025-08-25 19:13:10][354432553014769][5704 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-08-25 19:13:10][354432553014769][5704 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:15:03][350814495643330][0 ms][INFO] === Request start === [2025-08-25 19:15:03][350814495643330][1 ms][DEBUG] START check_scloud [2025-08-25 19:15:03][350814495643330][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:15:04][350814495643330][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 9416 24659 23798316 140092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:15:04][350814495643330][317 ms][DEBUG] targetPkg: running [2025-08-25 19:15:04][350814495643330][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 19:15:04][350814495643330][318 ms][DEBUG] START check_boot_completed [2025-08-25 19:15:04][350814495643330][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:15:04][350814495643330][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:15:04][350814495643330][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:15:04][350814495643330][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:15:04][350814495643330][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:15:04][350814495643330][411 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:15:04][350814495643330][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495643330\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4815\"}'\'' -e'"" [2025-08-25 19:15:04][350814495643330][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:15:04][350814495643330][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495643330\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4815\"}'\'' -e'"" [2025-08-25 19:15:08][350814495643330][4644 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8dcbfef4-0d67-4c19-8721-2fc0d25a1510","id":"QR_8dcbfef4-0d67-4c19-8721-2fc0d25a1510","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:15:08][350814495643330][4800 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-25 19:15:08][350814495643330][4800 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-25 19:15:08][350814495643330][4800 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:18:05][358076930307531][1 ms][INFO] === Request start === [2025-08-25 19:18:05][358076930307531][1 ms][DEBUG] START check_scloud [2025-08-25 19:18:05][358076930307531][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:18:05][358076930307531][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 9416 24659 23977736 151652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:18:05][358076930307531][309 ms][DEBUG] targetPkg: running [2025-08-25 19:18:05][358076930307531][310 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 19:18:05][358076930307531][310 ms][DEBUG] START check_boot_completed [2025-08-25 19:18:05][358076930307531][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:18:05][358076930307531][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:18:05][358076930307531][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:18:05][358076930307531][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:18:05][358076930307531][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:18:05][358076930307531][403 ms][DEBUG] START check_internet [2025-08-25 19:18:05][358076930307531][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:18:05][358076930307531][811 ms][DEBUG] SU: done in 408 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.057/202.057/202.057/0.000 ms\n [2025-08-25 19:18:05][358076930307531][811 ms][DEBUG] check_internet: online [2025-08-25 19:18:05][358076930307531][811 ms][DEBUG] END check_internet in 408 ms [2025-08-25 19:18:05][358076930307531][811 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:18:05][358076930307531][811 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358076930307531\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6807\"}'\'' -e'"" [2025-08-25 19:18:05][358076930307531][811 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:18:05][358076930307531][811 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358076930307531\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6807\"}'\'' -e'"" [2025-08-25 19:18:12][358076930307531][7104 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf229261-bfce-463b-be66-34729e941f5d","id":"QR_bf229261-bfce-463b-be66-34729e941f5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:18:12][358076930307531][7261 ms][DEBUG] proc_open done in 6449 ms; code=255; res.len=3343 [2025-08-25 19:18:12][358076930307531][7261 ms][DEBUG] END runCmdUntilRes#1 in 6449 ms [2025-08-25 19:18:12][358076930307531][7261 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:20:05][353150182113833][0 ms][INFO] === Request start === [2025-08-25 19:20:05][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:20:05][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:20:05][353150182113833][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 9416 24659 24114156 162012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:20:05][353150182113833][285 ms][DEBUG] targetPkg: running [2025-08-25 19:20:05][353150182113833][285 ms][DEBUG] END check_scloud in 284 ms [2025-08-25 19:20:05][353150182113833][285 ms][DEBUG] START check_boot_completed [2025-08-25 19:20:05][353150182113833][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:20:06][353150182113833][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:20:06][353150182113833][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:20:06][353150182113833][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:20:06][353150182113833][378 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:20:06][353150182113833][378 ms][DEBUG] START check_internet [2025-08-25 19:20:06][353150182113833][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:20:06][353150182113833][503 ms][DEBUG] SU: done in 125 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\nFrom 192.168.0.1: icmp_seq=1 Destination Net Unreachable\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms\n\n [2025-08-25 19:20:06][353150182113833][503 ms][WARN] check_internet: offline [2025-08-25 19:20:06][353150182113833][503 ms][DEBUG] END check_internet in 125 ms [2025-08-25 19:21:04][353150182113833][1 ms][INFO] === Request start === [2025-08-25 19:21:04][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:21:04][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:21:04][353150182113833][260 ms][DEBUG] SU: done in 258 ms; outu0_a118 9416 24659 24114156 161820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:21:04][353150182113833][260 ms][DEBUG] targetPkg: running [2025-08-25 19:21:04][353150182113833][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 19:21:04][353150182113833][260 ms][DEBUG] START check_boot_completed [2025-08-25 19:21:04][353150182113833][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:21:05][353150182113833][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:21:05][353150182113833][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:21:05][353150182113833][400 ms][DEBUG] SU: done in 93 ms; out [2025-08-25 19:21:05][353150182113833][400 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 19:21:05][353150182113833][400 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:21:05][353150182113833][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1818\"}'\'' -e'"" [2025-08-25 19:21:05][353150182113833][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:21:05][353150182113833][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1818\"}'\'' -e'"" [2025-08-25 19:21:07][353150182113833][2899 ms][DEBUG] frida res:res:{"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"}\r\n [2025-08-25 19:21:07][353150182113833][3056 ms][DEBUG] proc_open done in 2655 ms; code=255; res.len=115 [2025-08-25 19:21:07][353150182113833][3056 ms][DEBUG] END runCmdUntilRes#1 in 2655 ms [2025-08-25 19:21:07][353150182113833][3056 ms][WARN] Detected error: {"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"} [2025-08-25 19:21:07][353150182113833][3056 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 19:21:07][353150182113833][3212 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 19:21:07][353150182113833][3212 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 19:21:07][353150182113833][3212 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:21:08][353150182113833][3337 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 19:21:08][353150182113833][3337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:21:08][353150182113833][3524 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:21:10][353150182113833][5539 ms][DEBUG] START check_boot_completed [2025-08-25 19:21:10][353150182113833][5539 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:21:10][353150182113833][5587 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:21:10][353150182113833][5587 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:21:10][353150182113833][5649 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:21:10][353150182113833][5649 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:21:13][353150182113833][8664 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 19:21:13][353150182113833][8664 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1818\"}'\'' -e'"" [2025-08-25 19:21:15][353150182113833][11101 ms][DEBUG] frida res:res:{"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"}\r\n [2025-08-25 19:21:15][353150182113833][11257 ms][DEBUG] proc_open done in 2593 ms; code=255; res.len=115 [2025-08-25 19:21:15][353150182113833][11257 ms][DEBUG] END runCmdUntilRes#2 in 2593 ms [2025-08-25 19:21:15][353150182113833][11257 ms][WARN] Detected error 2; Reboot the device [2025-08-25 19:21:15][353150182113833][11257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 19:21:17][353150182113833][12803 ms][DEBUG] SU: done in 1546 ms; out [2025-08-25 19:21:32][355213799557269][0 ms][INFO] === Request start === [2025-08-25 19:21:32][355213799557269][1 ms][DEBUG] START check_scloud [2025-08-25 19:21:32][355213799557269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:21:32][355213799557269][48 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:21:32][355213799557269][48 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:21:32][355213799557269][48 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:21:32][355213799557269][95 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:21:32][355213799557269][95 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:21:32][355213799557269][126 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:21:34][355213799557269][2141 ms][DEBUG] END check_scloud in 2140 ms [2025-08-25 19:21:34][355213799557269][2141 ms][DEBUG] START check_boot_completed [2025-08-25 19:21:34][355213799557269][2141 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:22:04][353150182113833][1 ms][INFO] === Request start === [2025-08-25 19:22:04][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:22:04][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:22:04][353150182113833][40 ms][DEBUG] SU: done in 39 ms; out [2025-08-25 19:22:04][353150182113833][40 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:22:04][353150182113833][40 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:22:04][353150182113833][71 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:22:04][353150182113833][71 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:22:04][353150182113833][102 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:22:06][353150182113833][2117 ms][DEBUG] END check_scloud in 2117 ms [2025-08-25 19:22:06][353150182113833][2118 ms][DEBUG] START check_boot_completed [2025-08-25 19:22:06][353150182113833][2118 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:22:16][353150182113833][12303 ms][DEBUG] ADB: done in 10185 ms; out [2025-08-25 19:22:16][353150182113833][12303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:22:16][353150182113833][12366 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 19:22:16][353150182113833][12366 ms][DEBUG] END check_boot_completed in 10248 ms [2025-08-25 19:22:16][353150182113833][12366 ms][DEBUG] START check_internet [2025-08-25 19:22:16][353150182113833][12366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:22:16][353150182113833][12553 ms][DEBUG] SU: done in 187 ms; out [2025-08-25 19:22:16][353150182113833][12553 ms][WARN] check_internet: offline [2025-08-25 19:22:16][353150182113833][12553 ms][DEBUG] END check_internet in 187 ms [2025-08-25 19:22:21][355213799557269][0 ms][INFO] === Request start === [2025-08-25 19:22:21][355213799557269][1 ms][DEBUG] START check_scloud [2025-08-25 19:22:21][355213799557269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:22:22][355213799557269][323 ms][DEBUG] SU: done in 322 ms; out [2025-08-25 19:22:22][355213799557269][323 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:22:22][355213799557269][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:22:22][355213799557269][479 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 19:22:22][355213799557269][479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:22:22][355213799557269][698 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:22:24][355213799557269][2712 ms][DEBUG] END check_scloud in 2712 ms [2025-08-25 19:22:24][355213799557269][2713 ms][DEBUG] START check_boot_completed [2025-08-25 19:22:24][355213799557269][2713 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:22:24][355213799557269][2760 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:22:24][355213799557269][2760 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:22:24][355213799557269][2822 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:22:24][355213799557269][2822 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:22:24][355213799557269][2822 ms][DEBUG] START check_internet [2025-08-25 19:22:24][355213799557269][2822 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:22:24][355213799557269][2978 ms][DEBUG] SU: done in 156 ms; outPING google.com (192.168.50.10) 56(84) bytes of data.\nFrom 192.168.0.1: icmp_seq=1 Destination Net Unreachable\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms\n\n [2025-08-25 19:22:24][355213799557269][2978 ms][WARN] check_internet: offline [2025-08-25 19:22:24][355213799557269][2978 ms][DEBUG] END check_internet in 156 ms [2025-08-25 19:22:28][351269932056894][0 ms][INFO] === Request start === [2025-08-25 19:22:28][351269932056894][1 ms][DEBUG] START check_scloud [2025-08-25 19:22:28][351269932056894][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:22:29][351269932056894][655 ms][DEBUG] SU: done in 654 ms; out [2025-08-25 19:22:29][351269932056894][655 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:22:29][351269932056894][655 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:22:29][351269932056894][1045 ms][DEBUG] SU: done in 391 ms; out [2025-08-25 19:22:29][351269932056894][1045 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:22:30][351269932056894][1624 ms][DEBUG] SU: done in 578 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:22:32][351269932056894][3638 ms][DEBUG] END check_scloud in 3638 ms [2025-08-25 19:22:32][351269932056894][3639 ms][DEBUG] START check_boot_completed [2025-08-25 19:22:32][351269932056894][3639 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:22:32][351269932056894][3685 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:22:32][351269932056894][3685 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:22:32][351269932056894][3764 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 19:22:32][351269932056894][3764 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 19:22:32][351269932056894][3764 ms][DEBUG] START check_internet [2025-08-25 19:22:32][351269932056894][3764 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:22:32][351269932056894][4029 ms][DEBUG] SU: done in 265 ms; outPING google.com (192.168.50.10) 56(84) bytes of data.\nFrom 192.168.0.1: icmp_seq=1 Destination Net Unreachable\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms\n\n [2025-08-25 19:22:32][351269932056894][4029 ms][WARN] check_internet: offline [2025-08-25 19:22:32][351269932056894][4029 ms][DEBUG] END check_internet in 266 ms [2025-08-25 19:23:05][353150182113833][0 ms][INFO] === Request start === [2025-08-25 19:23:05][353150182113833][0 ms][DEBUG] START check_scloud [2025-08-25 19:23:05][353150182113833][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:23:05][353150182113833][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 8617 4997 23725972 57544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:23:05][353150182113833][294 ms][DEBUG] targetPkg: running [2025-08-25 19:23:05][353150182113833][294 ms][DEBUG] END check_scloud in 294 ms [2025-08-25 19:23:05][353150182113833][294 ms][DEBUG] START check_boot_completed [2025-08-25 19:23:05][353150182113833][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:23:05][353150182113833][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 19:23:05][353150182113833][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:23:05][353150182113833][388 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:23:05][353150182113833][388 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:23:05][353150182113833][388 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:23:05][353150182113833][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5185\"}'\'' -e'"" [2025-08-25 19:23:05][353150182113833][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:23:05][353150182113833][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5185\"}'\'' -e'"" [2025-08-25 19:23:16][353150182113833][11401 ms][DEBUG] frida res:res:{"error":"Error: java.net.SocketTimeoutException: failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6 (port 443) from /192.168.0.150 (port 50684) after 7000ms"}\r\n [2025-08-25 19:23:16][353150182113833][11557 ms][DEBUG] proc_open done in 11169 ms; code=255; res.len=174 [2025-08-25 19:23:16][353150182113833][11557 ms][DEBUG] END runCmdUntilRes#1 in 11169 ms [2025-08-25 19:23:16][353150182113833][11557 ms][WARN] Detected error: {"error":"Error: java.net.SocketTimeoutException: failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6 (port 443) from /192.168.0.150 (port 50684) after 7000ms"} [2025-08-25 19:23:16][353150182113833][11557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 19:23:16][353150182113833][11729 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 19:23:16][353150182113833][11729 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 19:23:16][353150182113833][11729 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:23:16][353150182113833][11885 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 19:23:16][353150182113833][11885 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:23:17][353150182113833][12088 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:23:19][353150182113833][14103 ms][DEBUG] START check_boot_completed [2025-08-25 19:23:19][353150182113833][14103 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:23:19][353150182113833][14150 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:23:19][353150182113833][14150 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:23:19][353150182113833][14197 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:23:19][353150182113833][14197 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:23:22][353150182113833][17212 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 19:23:22][353150182113833][17212 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5185\"}'\'' -e'"" [2025-08-25 19:23:32][353150182113833][27413 ms][DEBUG] frida res:res:{"error":"Error: java.net.SocketTimeoutException: failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6 (port 443) from /192.168.0.150 (port 50716) after 7000ms"}\r\n [2025-08-25 19:23:32][353150182113833][27569 ms][DEBUG] proc_open done in 10357 ms; code=255; res.len=174 [2025-08-25 19:23:32][353150182113833][27569 ms][DEBUG] END runCmdUntilRes#2 in 10357 ms [2025-08-25 19:23:32][353150182113833][27569 ms][WARN] Detected error 2; Reboot the device [2025-08-25 19:23:32][353150182113833][27569 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 19:23:34][353150182113833][29147 ms][DEBUG] SU: done in 1578 ms; out [2025-08-25 19:24:05][353150182113833][1 ms][INFO] === Request start === [2025-08-25 19:24:05][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:24:05][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:24:05][353150182113833][30 ms][DEBUG] SU: done in 29 ms; out [2025-08-25 19:24:05][353150182113833][30 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:24:05][353150182113833][30 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:24:05][353150182113833][62 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:24:05][353150182113833][62 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:24:05][353150182113833][93 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:24:07][353150182113833][2108 ms][DEBUG] END check_scloud in 2107 ms [2025-08-25 19:24:07][353150182113833][2108 ms][DEBUG] START check_boot_completed [2025-08-25 19:24:07][353150182113833][2108 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:24:33][353150182113833][28544 ms][DEBUG] ADB: done in 26435 ms; out [2025-08-25 19:24:33][353150182113833][28544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:24:33][353150182113833][28637 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 19:24:33][353150182113833][28637 ms][DEBUG] END check_boot_completed in 26529 ms [2025-08-25 19:24:33][353150182113833][28637 ms][DEBUG] START check_internet [2025-08-25 19:24:33][353150182113833][28637 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:24:33][353150182113833][28825 ms][DEBUG] SU: done in 187 ms; out [2025-08-25 19:24:33][353150182113833][28825 ms][WARN] check_internet: offline [2025-08-25 19:24:33][353150182113833][28825 ms][DEBUG] END check_internet in 187 ms [2025-08-25 19:25:05][353150182113833][0 ms][INFO] === Request start === [2025-08-25 19:25:05][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:25:05][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:25:05][353150182113833][340 ms][DEBUG] SU: done in 340 ms; out [2025-08-25 19:25:05][353150182113833][340 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:25:05][353150182113833][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:25:05][353150182113833][496 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 19:25:05][353150182113833][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:25:05][353150182113833][670 ms][DEBUG] SU: done in 174 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:25:07][353150182113833][2683 ms][DEBUG] END check_scloud in 2682 ms [2025-08-25 19:25:07][353150182113833][2683 ms][DEBUG] START check_boot_completed [2025-08-25 19:25:07][353150182113833][2683 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:25:07][353150182113833][2730 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:25:07][353150182113833][2730 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:25:07][353150182113833][2793 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 19:25:07][353150182113833][2793 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 19:25:07][353150182113833][2793 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:25:07][353150182113833][2793 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4997\"}'\'' -e'"" [2025-08-25 19:25:07][353150182113833][2793 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:25:07][353150182113833][2793 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4997\"}'\'' -e'"" [2025-08-25 19:25:15][353150182113833][10103 ms][DEBUG] frida res:res:{"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"}\r\n [2025-08-25 19:25:15][353150182113833][10259 ms][DEBUG] proc_open done in 7466 ms; code=255; res.len=115 [2025-08-25 19:25:15][353150182113833][10260 ms][DEBUG] END runCmdUntilRes#1 in 7466 ms [2025-08-25 19:25:15][353150182113833][10260 ms][WARN] Detected error: {"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"} [2025-08-25 19:25:15][353150182113833][10260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 19:25:15][353150182113833][10431 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 19:25:15][353150182113833][10432 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 19:25:15][353150182113833][10432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:25:15][353150182113833][10588 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 19:25:15][353150182113833][10588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:25:15][353150182113833][10760 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:25:17][353150182113833][12774 ms][DEBUG] START check_boot_completed [2025-08-25 19:25:17][353150182113833][12775 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:25:17][353150182113833][12821 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:25:17][353150182113833][12821 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:25:18][353150182113833][12884 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 19:25:18][353150182113833][12884 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 19:25:21][353150182113833][15899 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 19:25:21][353150182113833][15899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4997\"}'\'' -e'"" [2025-08-25 19:25:27][353150182113833][22616 ms][DEBUG] frida res:res:{"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"}\r\n [2025-08-25 19:25:27][353150182113833][22772 ms][DEBUG] proc_open done in 6873 ms; code=255; res.len=115 [2025-08-25 19:25:27][353150182113833][22772 ms][DEBUG] END runCmdUntilRes#2 in 6874 ms [2025-08-25 19:25:27][353150182113833][22772 ms][WARN] Detected error 2; Reboot the device [2025-08-25 19:25:27][353150182113833][22772 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 19:25:29][353150182113833][24412 ms][DEBUG] SU: done in 1640 ms; out [2025-08-25 19:26:05][353150182113833][1 ms][INFO] === Request start === [2025-08-25 19:26:05][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:26:05][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:26:05][353150182113833][45 ms][DEBUG] SU: done in 43 ms; out [2025-08-25 19:26:05][353150182113833][45 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:26:05][353150182113833][45 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:26:05][353150182113833][76 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:26:05][353150182113833][76 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:26:05][353150182113833][107 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:26:07][353150182113833][2122 ms][DEBUG] END check_scloud in 2121 ms [2025-08-25 19:26:07][353150182113833][2122 ms][DEBUG] START check_boot_completed [2025-08-25 19:26:07][353150182113833][2122 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:26:19][353150182113833][14349 ms][DEBUG] ADB: done in 12227 ms; out [2025-08-25 19:26:19][353150182113833][14350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:26:19][353150182113833][14428 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 19:26:19][353150182113833][14428 ms][DEBUG] END check_boot_completed in 12306 ms [2025-08-25 19:26:19][353150182113833][14428 ms][DEBUG] START check_internet [2025-08-25 19:26:19][353150182113833][14428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:26:19][353150182113833][14631 ms][DEBUG] SU: done in 203 ms; out [2025-08-25 19:26:19][353150182113833][14631 ms][WARN] check_internet: offline [2025-08-25 19:26:19][353150182113833][14631 ms][DEBUG] END check_internet in 203 ms [2025-08-25 19:26:24][355213799557269][0 ms][INFO] === Request start === [2025-08-25 19:26:24][355213799557269][1 ms][DEBUG] START check_scloud [2025-08-25 19:26:24][355213799557269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:26:24][355213799557269][315 ms][DEBUG] SU: done in 314 ms; out [2025-08-25 19:26:24][355213799557269][315 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:26:24][355213799557269][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:26:25][355213799557269][470 ms][DEBUG] SU: done in 155 ms; out [2025-08-25 19:26:25][355213799557269][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:26:25][355213799557269][783 ms][DEBUG] SU: done in 312 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:26:27][355213799557269][2798 ms][DEBUG] END check_scloud in 2797 ms [2025-08-25 19:26:27][355213799557269][2798 ms][DEBUG] START check_boot_completed [2025-08-25 19:26:27][355213799557269][2798 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:26:27][355213799557269][2845 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:26:27][355213799557269][2845 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:26:27][355213799557269][2907 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 19:26:27][355213799557269][2907 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 19:26:27][355213799557269][2907 ms][DEBUG] START check_internet [2025-08-25 19:26:27][355213799557269][2907 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:26:27][355213799557269][3095 ms][DEBUG] SU: done in 187 ms; outPING google.com (192.168.50.10) 56(84) bytes of data.\nFrom 192.168.0.1: icmp_seq=1 Destination Net Unreachable\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms\n\n [2025-08-25 19:26:27][355213799557269][3095 ms][WARN] check_internet: offline [2025-08-25 19:26:27][355213799557269][3095 ms][DEBUG] END check_internet in 187 ms [2025-08-25 19:26:31][351269932056894][0 ms][INFO] === Request start === [2025-08-25 19:26:31][351269932056894][1 ms][DEBUG] START check_scloud [2025-08-25 19:26:31][351269932056894][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:26:32][351269932056894][502 ms][DEBUG] SU: done in 502 ms; out [2025-08-25 19:26:32][351269932056894][503 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:26:32][351269932056894][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:26:32][351269932056894][971 ms][DEBUG] SU: done in 468 ms; out [2025-08-25 19:26:32][351269932056894][971 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:26:33][351269932056894][1580 ms][DEBUG] SU: done in 609 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:26:35][351269932056894][3595 ms][DEBUG] END check_scloud in 3595 ms [2025-08-25 19:26:35][351269932056894][3595 ms][DEBUG] START check_boot_completed [2025-08-25 19:26:35][351269932056894][3595 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:26:35][351269932056894][3642 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:26:35][351269932056894][3642 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:26:35][351269932056894][3705 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 19:26:35][351269932056894][3705 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:26:35][351269932056894][3705 ms][DEBUG] START check_internet [2025-08-25 19:26:35][351269932056894][3705 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:26:35][351269932056894][3939 ms][DEBUG] SU: done in 234 ms; outPING google.com (192.168.50.10) 56(84) bytes of data.\nFrom 192.168.0.1: icmp_seq=1 Destination Net Unreachable\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms\n\n [2025-08-25 19:26:35][351269932056894][3939 ms][WARN] check_internet: offline [2025-08-25 19:26:35][351269932056894][3939 ms][DEBUG] END check_internet in 234 ms [2025-08-25 19:27:05][353150182113833][0 ms][INFO] === Request start === [2025-08-25 19:27:05][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:27:05][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:27:05][353150182113833][372 ms][DEBUG] SU: done in 371 ms; outu0_a118 8611 5015 23599300 60212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:27:05][353150182113833][372 ms][DEBUG] targetPkg: running [2025-08-25 19:27:05][353150182113833][372 ms][DEBUG] END check_scloud in 372 ms [2025-08-25 19:27:05][353150182113833][373 ms][DEBUG] START check_boot_completed [2025-08-25 19:27:05][353150182113833][373 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:27:05][353150182113833][419 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:27:05][353150182113833][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:27:05][353150182113833][482 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:27:05][353150182113833][482 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:27:05][353150182113833][482 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:27:05][353150182113833][482 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1349\"}'\'' -e'"" [2025-08-25 19:27:05][353150182113833][482 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:27:05][353150182113833][482 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1349\"}'\'' -e'"" [2025-08-25 19:27:09][353150182113833][4980 ms][DEBUG] frida res:res:{"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"}\r\n [2025-08-25 19:27:10][353150182113833][5137 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=115 [2025-08-25 19:27:10][353150182113833][5137 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-08-25 19:27:10][353150182113833][5137 ms][WARN] Detected error: {"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"} [2025-08-25 19:27:10][353150182113833][5137 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 19:27:10][353150182113833][5293 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 19:27:10][353150182113833][5293 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 19:27:10][353150182113833][5293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:27:10][353150182113833][5465 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 19:27:10][353150182113833][5465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:27:10][353150182113833][5652 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:27:12][353150182113833][7667 ms][DEBUG] START check_boot_completed [2025-08-25 19:27:12][353150182113833][7667 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:27:12][353150182113833][7714 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:27:12][353150182113833][7714 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:27:12][353150182113833][7761 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:27:12][353150182113833][7761 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:27:15][353150182113833][10776 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 19:27:15][353150182113833][10776 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1349\"}'\'' -e'"" [2025-08-25 19:27:26][353150182113833][21508 ms][DEBUG] frida res:res:{"error":"Error: java.net.SocketTimeoutException: failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6 (port 443) from /192.168.0.150 (port 44258) after 7000ms"}\r\n [2025-08-25 19:27:26][353150182113833][21664 ms][DEBUG] proc_open done in 10888 ms; code=255; res.len=174 [2025-08-25 19:27:26][353150182113833][21664 ms][DEBUG] END runCmdUntilRes#2 in 10888 ms [2025-08-25 19:27:26][353150182113833][21664 ms][WARN] Detected error 2; Reboot the device [2025-08-25 19:27:26][353150182113833][21664 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 19:27:28][353150182113833][23492 ms][DEBUG] SU: done in 1828 ms; out [2025-08-25 19:28:05][353150182113833][0 ms][INFO] === Request start === [2025-08-25 19:28:05][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:28:05][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:28:05][353150182113833][33 ms][DEBUG] SU: done in 32 ms; out [2025-08-25 19:28:05][353150182113833][33 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:28:05][353150182113833][33 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:28:05][353150182113833][64 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:28:05][353150182113833][64 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:28:05][353150182113833][95 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:28:07][353150182113833][2110 ms][DEBUG] END check_scloud in 2110 ms [2025-08-25 19:28:07][353150182113833][2111 ms][DEBUG] START check_boot_completed [2025-08-25 19:28:07][353150182113833][2111 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:28:33][353150182113833][28524 ms][DEBUG] ADB: done in 26413 ms; out [2025-08-25 19:28:33][353150182113833][28524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:28:33][353150182113833][28602 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 19:28:33][353150182113833][28602 ms][DEBUG] END check_boot_completed in 26492 ms [2025-08-25 19:28:33][353150182113833][28602 ms][DEBUG] START check_internet [2025-08-25 19:28:33][353150182113833][28602 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:28:33][353150182113833][28821 ms][DEBUG] SU: done in 218 ms; out [2025-08-25 19:28:33][353150182113833][28821 ms][WARN] check_internet: offline [2025-08-25 19:28:33][353150182113833][28821 ms][DEBUG] END check_internet in 219 ms [2025-08-25 19:29:04][353150182113833][0 ms][INFO] === Request start === [2025-08-25 19:29:04][353150182113833][0 ms][DEBUG] START check_scloud [2025-08-25 19:29:04][353150182113833][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:29:04][353150182113833][323 ms][DEBUG] SU: done in 323 ms; out [2025-08-25 19:29:04][353150182113833][323 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:29:04][353150182113833][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:29:04][353150182113833][448 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 19:29:04][353150182113833][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:29:05][353150182113833][635 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:29:07][353150182113833][2651 ms][DEBUG] END check_scloud in 2650 ms [2025-08-25 19:29:07][353150182113833][2651 ms][DEBUG] START check_boot_completed [2025-08-25 19:29:07][353150182113833][2651 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:29:07][353150182113833][2698 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:29:07][353150182113833][2698 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:29:07][353150182113833][2760 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 19:29:07][353150182113833][2760 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 19:29:07][353150182113833][2760 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:29:07][353150182113833][2760 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4615\"}'\'' -e'"" [2025-08-25 19:29:07][353150182113833][2761 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:29:07][353150182113833][2761 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4615\"}'\'' -e'"" [2025-08-25 19:29:10][353150182113833][6306 ms][DEBUG] frida res:res:{"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"}\r\n [2025-08-25 19:29:11][353150182113833][6462 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=115 [2025-08-25 19:29:11][353150182113833][6462 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-25 19:29:11][353150182113833][6462 ms][WARN] Detected error: {"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"} [2025-08-25 19:29:11][353150182113833][6462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 19:29:11][353150182113833][6619 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 19:29:11][353150182113833][6619 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 19:29:11][353150182113833][6619 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:29:11][353150182113833][6759 ms][DEBUG] SU: done in 141 ms; out [2025-08-25 19:29:11][353150182113833][6759 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:29:11][353150182113833][6915 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:29:13][353150182113833][8930 ms][DEBUG] START check_boot_completed [2025-08-25 19:29:13][353150182113833][8931 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:29:13][353150182113833][8977 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:29:13][353150182113833][8977 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:29:13][353150182113833][9024 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:29:13][353150182113833][9024 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:29:16][353150182113833][12039 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 19:29:16][353150182113833][12039 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4615\"}'\'' -e'"" [2025-08-25 19:29:19][353150182113833][15070 ms][DEBUG] frida res:res:{"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"}\r\n [2025-08-25 19:29:19][353150182113833][15226 ms][DEBUG] proc_open done in 3187 ms; code=255; res.len=115 [2025-08-25 19:29:19][353150182113833][15226 ms][DEBUG] END runCmdUntilRes#2 in 3187 ms [2025-08-25 19:29:19][353150182113833][15226 ms][WARN] Detected error 2; Reboot the device [2025-08-25 19:29:19][353150182113833][15226 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 19:29:21][353150182113833][16913 ms][DEBUG] SU: done in 1687 ms; out [2025-08-25 19:30:05][353150182113833][1 ms][INFO] === Request start === [2025-08-25 19:30:05][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:30:05][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:30:05][353150182113833][39 ms][DEBUG] SU: done in 38 ms; out [2025-08-25 19:30:05][353150182113833][39 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:30:05][353150182113833][39 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:30:05][353150182113833][70 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:30:05][353150182113833][70 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:30:05][353150182113833][101 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:30:07][353150182113833][2117 ms][DEBUG] END check_scloud in 2116 ms [2025-08-25 19:30:07][353150182113833][2117 ms][DEBUG] START check_boot_completed [2025-08-25 19:30:07][353150182113833][2117 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:30:20][353150182113833][15356 ms][DEBUG] ADB: done in 13239 ms; out [2025-08-25 19:30:20][353150182113833][15356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:30:20][353150182113833][15402 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:30:20][353150182113833][15402 ms][DEBUG] END check_boot_completed in 13286 ms [2025-08-25 19:30:20][353150182113833][15402 ms][DEBUG] START check_internet [2025-08-25 19:30:20][353150182113833][15402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:30:20][353150182113833][15512 ms][DEBUG] SU: done in 110 ms; out [2025-08-25 19:30:20][353150182113833][15512 ms][WARN] check_internet: offline [2025-08-25 19:30:20][353150182113833][15512 ms][DEBUG] END check_internet in 110 ms [2025-08-25 19:30:25][355213799557269][0 ms][INFO] === Request start === [2025-08-25 19:30:25][355213799557269][1 ms][DEBUG] START check_scloud [2025-08-25 19:30:25][355213799557269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:30:26][355213799557269][288 ms][DEBUG] SU: done in 288 ms; out [2025-08-25 19:30:26][355213799557269][289 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:30:26][355213799557269][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:30:26][355213799557269][427 ms][DEBUG] SU: done in 139 ms; out [2025-08-25 19:30:26][355213799557269][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:30:26][355213799557269][600 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:30:28][355213799557269][2615 ms][DEBUG] END check_scloud in 2614 ms [2025-08-25 19:30:28][355213799557269][2615 ms][DEBUG] START check_boot_completed [2025-08-25 19:30:28][355213799557269][2615 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:30:28][355213799557269][2662 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:30:28][355213799557269][2662 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:30:28][355213799557269][2740 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 19:30:28][355213799557269][2740 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 19:30:28][355213799557269][2740 ms][DEBUG] START check_internet [2025-08-25 19:30:28][355213799557269][2740 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:30:28][355213799557269][2912 ms][DEBUG] SU: done in 172 ms; outPING google.com (192.168.50.10) 56(84) bytes of data.\nFrom 192.168.0.1: icmp_seq=1 Destination Net Unreachable\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms\n\n [2025-08-25 19:30:28][355213799557269][2912 ms][WARN] check_internet: offline [2025-08-25 19:30:28][355213799557269][2912 ms][DEBUG] END check_internet in 172 ms [2025-08-25 19:30:32][351269932056894][0 ms][INFO] === Request start === [2025-08-25 19:30:32][351269932056894][1 ms][DEBUG] START check_scloud [2025-08-25 19:30:32][351269932056894][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:30:33][351269932056894][775 ms][DEBUG] SU: done in 775 ms; out [2025-08-25 19:30:33][351269932056894][775 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:30:33][351269932056894][775 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:30:33][351269932056894][1025 ms][DEBUG] SU: done in 250 ms; out [2025-08-25 19:30:33][351269932056894][1025 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:30:34][351269932056894][1385 ms][DEBUG] SU: done in 359 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:30:36][351269932056894][3400 ms][DEBUG] END check_scloud in 3399 ms [2025-08-25 19:30:36][351269932056894][3400 ms][DEBUG] START check_boot_completed [2025-08-25 19:30:36][351269932056894][3400 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:30:36][351269932056894][3447 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:30:36][351269932056894][3447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:30:36][351269932056894][3556 ms][DEBUG] SU: done in 109 ms; out [2025-08-25 19:30:36][351269932056894][3556 ms][DEBUG] END check_boot_completed in 156 ms [2025-08-25 19:30:36][351269932056894][3556 ms][DEBUG] START check_internet [2025-08-25 19:30:36][351269932056894][3556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:30:36][351269932056894][3933 ms][DEBUG] SU: done in 376 ms; outPING google.com (192.168.50.10) 56(84) bytes of data.\nFrom 192.168.0.1: icmp_seq=1 Destination Net Unreachable\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms\n\n [2025-08-25 19:30:36][351269932056894][3933 ms][WARN] check_internet: offline [2025-08-25 19:30:36][351269932056894][3933 ms][DEBUG] END check_internet in 377 ms [2025-08-25 19:31:05][353150182113833][1 ms][INFO] === Request start === [2025-08-25 19:31:05][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:31:05][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:31:05][353150182113833][573 ms][DEBUG] SU: done in 572 ms; outu0_a118 8655 4971 23444676 68472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:31:05][353150182113833][573 ms][DEBUG] targetPkg: running [2025-08-25 19:31:05][353150182113833][573 ms][DEBUG] END check_scloud in 572 ms [2025-08-25 19:31:05][353150182113833][573 ms][DEBUG] START check_boot_completed [2025-08-25 19:31:05][353150182113833][573 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:31:05][353150182113833][620 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:31:05][353150182113833][620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:31:05][353150182113833][698 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 19:31:05][353150182113833][698 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 19:31:05][353150182113833][698 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:31:05][353150182113833][698 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3580\"}'\'' -e'"" [2025-08-25 19:31:05][353150182113833][698 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:31:05][353150182113833][698 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3580\"}'\'' -e'"" [2025-08-25 19:31:10][353150182113833][5290 ms][DEBUG] frida res:res:{"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"}\r\n [2025-08-25 19:31:10][353150182113833][5447 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=115 [2025-08-25 19:31:10][353150182113833][5447 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-08-25 19:31:10][353150182113833][5447 ms][WARN] Detected error: {"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"} [2025-08-25 19:31:10][353150182113833][5447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 19:31:10][353150182113833][5619 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 19:31:10][353150182113833][5619 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 19:31:10][353150182113833][5619 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:31:10][353150182113833][5822 ms][DEBUG] SU: done in 203 ms; out [2025-08-25 19:31:10][353150182113833][5822 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:31:11][353150182113833][6056 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:31:13][353150182113833][8071 ms][DEBUG] START check_boot_completed [2025-08-25 19:31:13][353150182113833][8071 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:31:13][353150182113833][8118 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:31:13][353150182113833][8118 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:31:13][353150182113833][8180 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 19:31:13][353150182113833][8181 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 19:31:16][353150182113833][11195 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 19:31:16][353150182113833][11195 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3580\"}'\'' -e'"" [2025-08-25 19:31:23][353150182113833][18647 ms][DEBUG] frida res:res:{"error":"Error: java.net.ConnectException: Failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6:443"}\r\n [2025-08-25 19:31:23][353150182113833][18803 ms][DEBUG] proc_open done in 7607 ms; code=255; res.len=115 [2025-08-25 19:31:23][353150182113833][18803 ms][DEBUG] END runCmdUntilRes#2 in 7608 ms [2025-08-25 19:31:23][353150182113833][18803 ms][WARN] Detected error 2; Reboot the device [2025-08-25 19:31:23][353150182113833][18803 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 19:31:25][353150182113833][20318 ms][DEBUG] SU: done in 1515 ms; out [2025-08-25 19:32:04][353150182113833][0 ms][INFO] === Request start === [2025-08-25 19:32:04][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:32:04][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:32:04][353150182113833][42 ms][DEBUG] SU: done in 41 ms; out [2025-08-25 19:32:04][353150182113833][42 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:32:04][353150182113833][42 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:32:04][353150182113833][73 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:32:04][353150182113833][74 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:32:04][353150182113833][105 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:32:06][353150182113833][2120 ms][DEBUG] END check_scloud in 2119 ms [2025-08-25 19:32:06][353150182113833][2120 ms][DEBUG] START check_boot_completed [2025-08-25 19:32:06][353150182113833][2120 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:32:25][353150182113833][21447 ms][DEBUG] ADB: done in 19327 ms; out [2025-08-25 19:32:25][353150182113833][21447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:32:25][353150182113833][21572 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 19:32:25][353150182113833][21572 ms][DEBUG] END check_boot_completed in 19452 ms [2025-08-25 19:32:25][353150182113833][21572 ms][DEBUG] START check_internet [2025-08-25 19:32:25][353150182113833][21572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:32:25][353150182113833][21776 ms][DEBUG] SU: done in 204 ms; out [2025-08-25 19:32:25][353150182113833][21776 ms][WARN] check_internet: offline [2025-08-25 19:32:25][353150182113833][21776 ms][DEBUG] END check_internet in 204 ms [2025-08-25 19:32:31][355213799557269][1 ms][INFO] === Request start === [2025-08-25 19:32:31][355213799557269][1 ms][DEBUG] START check_scloud [2025-08-25 19:32:31][355213799557269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:32:31][355213799557269][300 ms][DEBUG] SU: done in 299 ms; out [2025-08-25 19:32:31][355213799557269][300 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:32:31][355213799557269][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:32:31][355213799557269][456 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 19:32:31][355213799557269][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:32:31][355213799557269][659 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:32:33][355213799557269][2674 ms][DEBUG] END check_scloud in 2673 ms [2025-08-25 19:32:33][355213799557269][2674 ms][DEBUG] START check_boot_completed [2025-08-25 19:32:33][355213799557269][2674 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:32:33][355213799557269][2721 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:32:33][355213799557269][2721 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:32:33][355213799557269][2799 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 19:32:33][355213799557269][2799 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 19:32:33][355213799557269][2799 ms][DEBUG] START check_internet [2025-08-25 19:32:33][355213799557269][2799 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:32:34][355213799557269][3221 ms][DEBUG] SU: done in 422 ms; outPING google.com (192.168.50.10) 56(84) bytes of data.\nFrom 192.168.0.1: icmp_seq=1 Destination Net Unreachable\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms\n\n [2025-08-25 19:32:34][355213799557269][3221 ms][WARN] check_internet: offline [2025-08-25 19:32:34][355213799557269][3221 ms][DEBUG] END check_internet in 422 ms [2025-08-25 19:33:04][353150182113833][0 ms][INFO] === Request start === [2025-08-25 19:33:04][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:33:04][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:33:05][353150182113833][440 ms][DEBUG] SU: done in 439 ms; out [2025-08-25 19:33:05][353150182113833][440 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:33:05][353150182113833][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:33:05][353150182113833][580 ms][DEBUG] SU: done in 139 ms; out [2025-08-25 19:33:05][353150182113833][580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:33:05][353150182113833][861 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:33:07][353150182113833][2876 ms][DEBUG] END check_scloud in 2875 ms [2025-08-25 19:33:07][353150182113833][2876 ms][DEBUG] START check_boot_completed [2025-08-25 19:33:07][353150182113833][2876 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:33:07][353150182113833][2923 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:33:07][353150182113833][2923 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:33:07][353150182113833][2987 ms][DEBUG] SU: done in 64 ms; out [2025-08-25 19:33:07][353150182113833][2987 ms][DEBUG] END check_boot_completed in 111 ms [2025-08-25 19:33:07][353150182113833][2987 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:33:07][353150182113833][2987 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4096\"}'\'' -e'"" [2025-08-25 19:33:07][353150182113833][2988 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:33:07][353150182113833][2988 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4096\"}'\'' -e'"" [2025-08-25 19:33:18][353150182113833][14139 ms][DEBUG] frida res:res:{"error":"Error: java.net.SocketTimeoutException: failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6 (port 443) from /192.168.0.150 (port 54620) after 7000ms"}\r\n [2025-08-25 19:33:18][353150182113833][14295 ms][DEBUG] proc_open done in 11307 ms; code=255; res.len=174 [2025-08-25 19:33:18][353150182113833][14295 ms][DEBUG] END runCmdUntilRes#1 in 11308 ms [2025-08-25 19:33:18][353150182113833][14295 ms][WARN] Detected error: {"error":"Error: java.net.SocketTimeoutException: failed to connect to us-kme-api-mssl.samsungknox.com/192.168.50.6 (port 443) from /192.168.0.150 (port 54620) after 7000ms"} [2025-08-25 19:33:18][353150182113833][14295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 19:33:19][353150182113833][14452 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 19:33:19][353150182113833][14452 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 19:33:19][353150182113833][14452 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:33:19][353150182113833][14592 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 19:33:19][353150182113833][14592 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:33:19][353150182113833][14748 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:33:21][353150182113833][16763 ms][DEBUG] START check_boot_completed [2025-08-25 19:33:21][353150182113833][16763 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:33:21][353150182113833][16795 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 19:33:21][353150182113833][16795 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:33:21][353150182113833][16857 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 19:33:21][353150182113833][16857 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:33:24][353150182113833][19872 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 19:33:24][353150182113833][19872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4096\"}'\'' -e'"" [2025-08-25 19:34:04][353150182113833][1 ms][INFO] === Request start === [2025-08-25 19:34:04][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:34:04][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:34:04][353150182113833][341 ms][DEBUG] SU: done in 340 ms; out [2025-08-25 19:34:04][353150182113833][341 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:34:04][353150182113833][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:34:05][353150182113833][513 ms][DEBUG] SU: done in 172 ms; out [2025-08-25 19:34:05][353150182113833][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:34:05][353150182113833][747 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:34:07][353150182113833][2762 ms][DEBUG] END check_scloud in 2761 ms [2025-08-25 19:34:07][353150182113833][2762 ms][DEBUG] START check_boot_completed [2025-08-25 19:34:07][353150182113833][2762 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:34:07][353150182113833][2809 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:34:07][353150182113833][2809 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:34:07][353150182113833][2903 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 19:34:07][353150182113833][2903 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 19:34:07][353150182113833][2903 ms][DEBUG] START check_internet [2025-08-25 19:34:07][353150182113833][2903 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:34:09][353150182113833][5027 ms][DEBUG] SU: done in 2124 ms; out [2025-08-25 19:34:09][353150182113833][5027 ms][WARN] check_internet: offline [2025-08-25 19:34:09][353150182113833][5027 ms][DEBUG] END check_internet in 2124 ms [2025-08-25 19:34:14][355213799557269][0 ms][INFO] === Request start === [2025-08-25 19:34:14][355213799557269][1 ms][DEBUG] START check_scloud [2025-08-25 19:34:14][355213799557269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:34:14][355213799557269][40 ms][DEBUG] SU: done in 39 ms; out [2025-08-25 19:34:14][355213799557269][40 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:34:14][355213799557269][40 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:34:14][355213799557269][71 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:34:14][355213799557269][71 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:34:14][355213799557269][102 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:34:16][355213799557269][2118 ms][DEBUG] END check_scloud in 2117 ms [2025-08-25 19:34:16][355213799557269][2118 ms][DEBUG] START check_boot_completed [2025-08-25 19:34:16][355213799557269][2118 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:35:04][353150182113833][0 ms][INFO] === Request start === [2025-08-25 19:35:04][353150182113833][0 ms][DEBUG] START check_scloud [2025-08-25 19:35:04][353150182113833][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:35:04][353150182113833][27 ms][DEBUG] SU: done in 27 ms; out [2025-08-25 19:35:04][353150182113833][27 ms][WARN] targetPkg: not running, restarting [2025-08-25 19:35:04][353150182113833][27 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:35:04][353150182113833][58 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:35:04][353150182113833][58 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:35:04][353150182113833][90 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 19:35:06][353150182113833][2105 ms][DEBUG] END check_scloud in 2105 ms [2025-08-25 19:35:06][353150182113833][2105 ms][DEBUG] START check_boot_completed [2025-08-25 19:35:06][353150182113833][2105 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:35:24][353150182113833][19396 ms][DEBUG] ADB: done in 17291 ms; out [2025-08-25 19:35:24][353150182113833][19396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:35:24][353150182113833][19630 ms][DEBUG] SU: done in 234 ms; out [2025-08-25 19:35:24][353150182113833][19631 ms][DEBUG] END check_boot_completed in 17526 ms [2025-08-25 19:35:24][353150182113833][19631 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:35:24][353150182113833][19631 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7618\"}'\'' -e'"" [2025-08-25 19:35:24][353150182113833][19631 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:35:24][353150182113833][19631 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7618\"}'\'' -e'"" [2025-08-25 19:35:35][353150182113833][31018 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bde0c162-cb48-42b2-a0cd-d225556134f4","id":"QR_bde0c162-cb48-42b2-a0cd-d225556134f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:35:35][353150182113833][31174 ms][DEBUG] proc_open done in 11544 ms; code=255; res.len=3343 [2025-08-25 19:35:35][353150182113833][31174 ms][DEBUG] END runCmdUntilRes#1 in 11544 ms [2025-08-25 19:35:35][353150182113833][31175 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:36:06][353150182113833][0 ms][INFO] === Request start === [2025-08-25 19:36:06][353150182113833][1 ms][DEBUG] START check_scloud [2025-08-25 19:36:06][353150182113833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:36:06][353150182113833][354 ms][DEBUG] SU: done in 353 ms; outu0_a118 16851 13469 23878396 85036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:36:06][353150182113833][354 ms][DEBUG] targetPkg: running [2025-08-25 19:36:06][353150182113833][354 ms][DEBUG] END check_scloud in 353 ms [2025-08-25 19:36:06][353150182113833][354 ms][DEBUG] START check_boot_completed [2025-08-25 19:36:06][353150182113833][354 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:36:06][353150182113833][400 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:36:06][353150182113833][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:36:06][353150182113833][447 ms][DEBUG] SU: done in 46 ms; out [2025-08-25 19:36:06][353150182113833][447 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:36:06][353150182113833][447 ms][DEBUG] START check_internet [2025-08-25 19:36:06][353150182113833][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:36:07][353150182113833][994 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.732/200.732/200.732/0.000 ms\n [2025-08-25 19:36:07][353150182113833][994 ms][DEBUG] check_internet: online [2025-08-25 19:36:07][353150182113833][994 ms][DEBUG] END check_internet in 547 ms [2025-08-25 19:36:07][353150182113833][994 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:36:07][353150182113833][994 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3506\"}'\'' -e'"" [2025-08-25 19:36:07][353150182113833][995 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:36:07][353150182113833][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353150182113833\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3506\"}'\'' -e'"" [2025-08-25 19:36:11][353150182113833][5399 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ca7c341-a197-4e2d-ae6f-61be5255da99","id":"QR_1ca7c341-a197-4e2d-ae6f-61be5255da99","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:36:12][353150182113833][5555 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-08-25 19:36:12][353150182113833][5555 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-08-25 19:36:12][353150182113833][5555 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:36:18][355213799557269][0 ms][INFO] === Request start === [2025-08-25 19:36:18][355213799557269][1 ms][DEBUG] START check_scloud [2025-08-25 19:36:18][355213799557269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:36:18][355213799557269][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 16851 13469 24047620 98252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:36:18][355213799557269][329 ms][DEBUG] targetPkg: running [2025-08-25 19:36:18][355213799557269][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-25 19:36:18][355213799557269][329 ms][DEBUG] START check_boot_completed [2025-08-25 19:36:18][355213799557269][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:36:18][355213799557269][376 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:36:18][355213799557269][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:36:18][355213799557269][438 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:36:18][355213799557269][438 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:36:18][355213799557269][438 ms][DEBUG] START check_internet [2025-08-25 19:36:18][355213799557269][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:36:18][355213799557269][735 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.645/189.645/189.645/0.000 ms\n [2025-08-25 19:36:18][355213799557269][735 ms][DEBUG] check_internet: online [2025-08-25 19:36:18][355213799557269][735 ms][DEBUG] END check_internet in 297 ms [2025-08-25 19:36:18][355213799557269][735 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:36:18][355213799557269][735 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355213799557269\",\"model\":\"SM-A326B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4258\"}'\'' -e'"" [2025-08-25 19:36:18][355213799557269][735 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:36:18][355213799557269][735 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355213799557269\",\"model\":\"SM-A326B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4258\"}'\'' -e'"" [2025-08-25 19:36:24][355213799557269][6187 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_adfa27ee-ea4b-4501-9ea8-e4d47652d5c9","id":"QR_adfa27ee-ea4b-4501-9ea8-e4d47652d5c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:36:24][355213799557269][6343 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-08-25 19:36:24][355213799557269][6343 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-25 19:36:24][355213799557269][6343 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:36:29][351269932056894][0 ms][INFO] === Request start === [2025-08-25 19:36:29][351269932056894][1 ms][DEBUG] START check_scloud [2025-08-25 19:36:29][351269932056894][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:36:29][351269932056894][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 16851 13469 24201376 110344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:36:29][351269932056894][290 ms][DEBUG] targetPkg: running [2025-08-25 19:36:29][351269932056894][290 ms][DEBUG] END check_scloud in 290 ms [2025-08-25 19:36:29][351269932056894][290 ms][DEBUG] START check_boot_completed [2025-08-25 19:36:29][351269932056894][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:36:29][351269932056894][337 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:36:29][351269932056894][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:36:29][351269932056894][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:36:29][351269932056894][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:36:29][351269932056894][384 ms][DEBUG] START check_internet [2025-08-25 19:36:29][351269932056894][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:36:30][351269932056894][681 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.135/182.135/182.135/0.000 ms\n [2025-08-25 19:36:30][351269932056894][681 ms][DEBUG] check_internet: online [2025-08-25 19:36:30][351269932056894][681 ms][DEBUG] END check_internet in 297 ms [2025-08-25 19:36:30][351269932056894][681 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:36:30][351269932056894][681 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351269932056894\",\"model\":\"SM-A426B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6077\"}'\'' -e'"" [2025-08-25 19:36:30][351269932056894][681 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:36:30][351269932056894][681 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351269932056894\",\"model\":\"SM-A426B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6077\"}'\'' -e'"" [2025-08-25 19:36:34][351269932056894][4727 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2d0d903-23c6-4ae8-9498-01cd4413ac34","id":"QR_a2d0d903-23c6-4ae8-9498-01cd4413ac34","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:36:34][351269932056894][4883 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-25 19:36:34][351269932056894][4883 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-25 19:36:34][351269932056894][4883 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:37:03][352795334534202][0 ms][INFO] === Request start === [2025-08-25 19:37:03][352795334534202][1 ms][DEBUG] START check_scloud [2025-08-25 19:37:03][352795334534202][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:37:03][352795334534202][328 ms][DEBUG] SU: done in 328 ms; outu0_a118 16851 13469 24294624 121776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:37:03][352795334534202][329 ms][DEBUG] targetPkg: running [2025-08-25 19:37:03][352795334534202][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-25 19:37:03][352795334534202][329 ms][DEBUG] START check_boot_completed [2025-08-25 19:37:03][352795334534202][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:37:03][352795334534202][375 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:37:03][352795334534202][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:37:03][352795334534202][438 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:37:03][352795334534202][438 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:37:03][352795334534202][438 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:37:03][352795334534202][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352795334534202\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7944\"}'\'' -e'"" [2025-08-25 19:37:03][352795334534202][438 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:37:03][352795334534202][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352795334534202\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7944\"}'\'' -e'"" [2025-08-25 19:37:07][352795334534202][4296 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1d2523a-cdaa-43ff-89d0-31ae0b50b737","id":"QR_e1d2523a-cdaa-43ff-89d0-31ae0b50b737","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:37:07][352795334534202][4452 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-25 19:37:07][352795334534202][4452 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-25 19:37:07][352795334534202][4452 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:37:11][353722795706946][1 ms][INFO] === Request start === [2025-08-25 19:37:11][353722795706946][1 ms][DEBUG] START check_scloud [2025-08-25 19:37:11][353722795706946][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:37:11][353722795706946][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 16851 13469 24457704 136408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:37:11][353722795706946][296 ms][DEBUG] targetPkg: running [2025-08-25 19:37:11][353722795706946][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-25 19:37:11][353722795706946][296 ms][DEBUG] START check_boot_completed [2025-08-25 19:37:11][353722795706946][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:37:11][353722795706946][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 19:37:11][353722795706946][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:37:11][353722795706946][376 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 19:37:11][353722795706946][376 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 19:37:11][353722795706946][376 ms][DEBUG] rawBody.length=1158 [2025-08-25 19:37:11][353722795706946][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722795706946\",\"model\":\"SM-T500\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TR700GQAJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7288\"}'\'' -e'"" [2025-08-25 19:37:11][353722795706946][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:37:11][353722795706946][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722795706946\",\"model\":\"SM-T500\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TR700GQAJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7288\"}'\'' -e'"" [2025-08-25 19:37:15][353722795706946][4358 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b366e4e-b3ff-4597-8cf0-bc09b042b605","id":"QR_3b366e4e-b3ff-4597-8cf0-bc09b042b605","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:37:15][353722795706946][4514 ms][DEBUG] proc_open done in 4138 ms; code=255; res.len=3343 [2025-08-25 19:37:15][353722795706946][4514 ms][DEBUG] END runCmdUntilRes#1 in 4138 ms [2025-08-25 19:37:15][353722795706946][4514 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:37:19][355198110988774][0 ms][INFO] === Request start === [2025-08-25 19:37:19][355198110988774][1 ms][DEBUG] START check_scloud [2025-08-25 19:37:19][355198110988774][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:37:19][355198110988774][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 16851 13469 24626800 144868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:37:19][355198110988774][305 ms][DEBUG] targetPkg: running [2025-08-25 19:37:19][355198110988774][305 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 19:37:19][355198110988774][305 ms][DEBUG] START check_boot_completed [2025-08-25 19:37:19][355198110988774][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:37:19][355198110988774][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:37:19][355198110988774][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:37:20][355198110988774][399 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 19:37:20][355198110988774][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:37:20][355198110988774][400 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:37:20][355198110988774][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355198110988774\",\"model\":\"SM-A205U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6683\"}'\'' -e'"" [2025-08-25 19:37:20][355198110988774][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:37:20][355198110988774][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355198110988774\",\"model\":\"SM-A205U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6683\"}'\'' -e'"" [2025-08-25 19:37:25][355198110988774][5913 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_031ca932-4d1a-40cc-82e8-b09000c0ff20","id":"QR_031ca932-4d1a-40cc-82e8-b09000c0ff20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:37:25][355198110988774][6069 ms][DEBUG] proc_open done in 5669 ms; code=255; res.len=3343 [2025-08-25 19:37:25][355198110988774][6069 ms][DEBUG] END runCmdUntilRes#1 in 5669 ms [2025-08-25 19:37:25][355198110988774][6069 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:37:31][350013883765637][0 ms][INFO] === Request start === [2025-08-25 19:37:31][350013883765637][1 ms][DEBUG] START check_scloud [2025-08-25 19:37:31][350013883765637][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:37:32][350013883765637][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 16851 13469 24746608 155160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:37:32][350013883765637][313 ms][DEBUG] targetPkg: running [2025-08-25 19:37:32][350013883765637][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 19:37:32][350013883765637][313 ms][DEBUG] START check_boot_completed [2025-08-25 19:37:32][350013883765637][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:37:32][350013883765637][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:37:32][350013883765637][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:37:32][350013883765637][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:37:32][350013883765637][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:37:32][350013883765637][422 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:37:32][350013883765637][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883765637\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8706\"}'\'' -e'"" [2025-08-25 19:37:32][350013883765637][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:37:32][350013883765637][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883765637\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8706\"}'\'' -e'"" [2025-08-25 19:37:35][350013883765637][4187 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 19:37:36][350013883765637][4343 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=107 [2025-08-25 19:37:36][350013883765637][4343 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-25 19:37:36][350013883765637][4343 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 19:37:36][][0 ms][INFO] === Request start === [2025-08-25 19:37:36][][1 ms][DEBUG] START check_scloud [2025-08-25 19:37:36][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:37:36][][271 ms][DEBUG] SU: done in 271 ms; outu0_a118 16851 13469 24919932 166960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:37:36][][272 ms][DEBUG] targetPkg: running [2025-08-25 19:37:36][][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-25 19:37:36][][272 ms][DEBUG] START check_boot_completed [2025-08-25 19:37:36][][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:37:36][][318 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:37:36][][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:37:36][][396 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 19:37:36][][397 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 19:37:36][][397 ms][DEBUG] rawBody.length=1129 [2025-08-25 19:37:36][][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TB1S1L0B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5387\"}'\'' -e'"" [2025-08-25 19:37:36][][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:37:36][][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TB1S1L0B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5387\"}'\'' -e'"" [2025-08-25 19:37:40][][3817 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 19:37:40][][3974 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=107 [2025-08-25 19:37:40][][3974 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-25 19:37:40][][3974 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 19:37:42][350013883765637][0 ms][INFO] === Request start === [2025-08-25 19:37:42][350013883765637][1 ms][DEBUG] START check_scloud [2025-08-25 19:37:42][350013883765637][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:37:42][350013883765637][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 16851 13469 25056160 177840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:37:42][350013883765637][294 ms][DEBUG] targetPkg: running [2025-08-25 19:37:42][350013883765637][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-25 19:37:42][350013883765637][294 ms][DEBUG] START check_boot_completed [2025-08-25 19:37:42][350013883765637][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:37:42][350013883765637][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 19:37:42][350013883765637][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:37:42][350013883765637][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:37:42][350013883765637][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 19:37:42][350013883765637][372 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:37:42][350013883765637][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883765637\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1312\"}'\'' -e'"" [2025-08-25 19:37:42][350013883765637][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:37:42][350013883765637][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883765637\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1312\"}'\'' -e'"" [2025-08-25 19:37:47][350013883765637][4824 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ea44017-e1ef-426c-8e23-9fe98b5da820","id":"QR_9ea44017-e1ef-426c-8e23-9fe98b5da820","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:37:47][350013883765637][4980 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-08-25 19:37:47][350013883765637][4980 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-08-25 19:37:47][350013883765637][4981 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:38:04][351816151343989][0 ms][INFO] === Request start === [2025-08-25 19:38:04][351816151343989][1 ms][DEBUG] START check_scloud [2025-08-25 19:38:04][351816151343989][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:38:04][351816151343989][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 16851 13469 25139132 187256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:38:04][351816151343989][312 ms][DEBUG] targetPkg: running [2025-08-25 19:38:04][351816151343989][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 19:38:04][351816151343989][312 ms][DEBUG] START check_boot_completed [2025-08-25 19:38:04][351816151343989][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:38:04][351816151343989][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:38:04][351816151343989][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:38:04][351816151343989][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:38:04][351816151343989][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:38:04][351816151343989][406 ms][DEBUG] START check_internet [2025-08-25 19:38:04][351816151343989][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:38:05][351816151343989][718 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.543/201.543/201.543/0.000 ms\n [2025-08-25 19:38:05][351816151343989][718 ms][DEBUG] check_internet: online [2025-08-25 19:38:05][351816151343989][719 ms][DEBUG] END check_internet in 312 ms [2025-08-25 19:38:05][351816151343989][719 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:38:05][351816151343989][719 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351816151343989\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3758\"}'\'' -e'"" [2025-08-25 19:38:05][351816151343989][719 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:38:05][351816151343989][719 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351816151343989\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3758\"}'\'' -e'"" [2025-08-25 19:38:10][351816151343989][5670 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8308613-6e71-4958-8544-ca6f4c0bfcc6","id":"QR_a8308613-6e71-4958-8544-ca6f4c0bfcc6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:38:10][351816151343989][5826 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-08-25 19:38:10][351816151343989][5826 ms][DEBUG] END runCmdUntilRes#1 in 5107 ms [2025-08-25 19:38:10][351816151343989][5826 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:38:15][356904750314489][0 ms][INFO] === Request start === [2025-08-25 19:38:15][356904750314489][1 ms][DEBUG] START check_scloud [2025-08-25 19:38:15][356904750314489][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:38:15][356904750314489][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 16851 13469 25286972 198420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:38:15][356904750314489][315 ms][DEBUG] targetPkg: running [2025-08-25 19:38:15][356904750314489][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 19:38:15][356904750314489][315 ms][DEBUG] START check_boot_completed [2025-08-25 19:38:15][356904750314489][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:38:15][356904750314489][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:38:15][356904750314489][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:38:15][356904750314489][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:38:15][356904750314489][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:38:15][356904750314489][409 ms][DEBUG] START check_internet [2025-08-25 19:38:15][356904750314489][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:38:16][356904750314489][674 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=152 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 152.088/152.088/152.088/0.000 ms\n [2025-08-25 19:38:16][356904750314489][675 ms][DEBUG] check_internet: online [2025-08-25 19:38:16][356904750314489][675 ms][DEBUG] END check_internet in 266 ms [2025-08-25 19:38:16][356904750314489][675 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:38:16][356904750314489][675 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356904750314489\",\"model\":\"SM-T636B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7125\"}'\'' -e'"" [2025-08-25 19:38:16][356904750314489][675 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:38:16][356904750314489][675 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356904750314489\",\"model\":\"SM-T636B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7125\"}'\'' -e'"" [2025-08-25 19:38:20][356904750314489][5173 ms][DEBUG] proc_open done in 4498 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 19:38:20][356904750314489][5174 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-08-25 19:38:20][356904750314489][5174 ms][WARN] Detected error: Process with pid 16851 either refused to load frida-agent, or terminated during injection [2025-08-25 19:38:20][356904750314489][5174 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 19:38:20][356904750314489][5316 ms][DEBUG] SU: done in 142 ms; out [2025-08-25 19:38:20][356904750314489][5316 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 19:38:20][356904750314489][5316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:38:20][356904750314489][5455 ms][DEBUG] SU: done in 139 ms; out [2025-08-25 19:38:20][356904750314489][5455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:38:20][356904750314489][5626 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:38:23][356904750314489][7641 ms][DEBUG] START check_boot_completed [2025-08-25 19:38:23][356904750314489][7641 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:38:23][356904750314489][7688 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:38:23][356904750314489][7689 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:38:23][356904750314489][7782 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 19:38:23][356904750314489][7782 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 19:38:26][356904750314489][10797 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 19:38:26][356904750314489][10797 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356904750314489\",\"model\":\"SM-T636B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7125\"}'\'' -e'"" [2025-08-25 19:38:29][356904750314489][14624 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e93656c-6af5-4866-a98a-21364357608b","id":"QR_3e93656c-6af5-4866-a98a-21364357608b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:38:30][356904750314489][14780 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-25 19:38:30][356904750314489][14780 ms][DEBUG] END runCmdUntilRes#2 in 3984 ms [2025-08-25 19:38:30][356904750314489][14781 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:39:04][350792523382503][0 ms][INFO] === Request start === [2025-08-25 19:39:04][350792523382503][0 ms][DEBUG] START check_scloud [2025-08-25 19:39:04][350792523382503][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:39:04][350792523382503][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 28009 13469 23740464 127932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:39:04][350792523382503][329 ms][DEBUG] targetPkg: running [2025-08-25 19:39:04][350792523382503][329 ms][DEBUG] END check_scloud in 329 ms [2025-08-25 19:39:04][350792523382503][329 ms][DEBUG] START check_boot_completed [2025-08-25 19:39:04][350792523382503][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:39:04][350792523382503][375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:39:04][350792523382503][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:39:04][350792523382503][422 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:39:04][350792523382503][422 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:39:04][350792523382503][422 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:39:04][350792523382503][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792523382503\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7056\"}'\'' -e'"" [2025-08-25 19:39:04][350792523382503][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:39:04][350792523382503][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792523382503\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7056\"}'\'' -e'"" [2025-08-25 19:39:10][350792523382503][5655 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63af59c7-c84a-4188-a8eb-f8908d519c22","id":"QR_63af59c7-c84a-4188-a8eb-f8908d519c22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:39:10][350792523382503][5812 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-08-25 19:39:10][350792523382503][5812 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-08-25 19:39:10][350792523382503][5812 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:41:02][356161111031050][1 ms][INFO] === Request start === [2025-08-25 19:41:02][356161111031050][1 ms][DEBUG] START check_scloud [2025-08-25 19:41:02][356161111031050][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:41:03][356161111031050][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 28009 13469 23877576 138536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:41:03][356161111031050][319 ms][DEBUG] targetPkg: running [2025-08-25 19:41:03][356161111031050][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 19:41:03][356161111031050][319 ms][DEBUG] START check_boot_completed [2025-08-25 19:41:03][356161111031050][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:41:03][356161111031050][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:41:03][356161111031050][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:41:03][356161111031050][413 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:41:03][356161111031050][413 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:41:03][356161111031050][413 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:41:03][356161111031050][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356161111031050\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7828\"}'\'' -e'"" [2025-08-25 19:41:03][356161111031050][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:41:03][356161111031050][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356161111031050\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7828\"}'\'' -e'"" [2025-08-25 19:41:07][356161111031050][4521 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7baf902-24e5-46cc-af96-7311396befec","id":"QR_d7baf902-24e5-46cc-af96-7311396befec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:41:07][356161111031050][4677 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 19:41:07][356161111031050][4677 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 19:41:07][356161111031050][4677 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:41:11][350792527055113][0 ms][INFO] === Request start === [2025-08-25 19:41:11][350792527055113][1 ms][DEBUG] START check_scloud [2025-08-25 19:41:11][350792527055113][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:41:11][350792527055113][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 28009 13469 24046672 149920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:41:11][350792527055113][321 ms][DEBUG] targetPkg: running [2025-08-25 19:41:11][350792527055113][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-25 19:41:11][350792527055113][321 ms][DEBUG] START check_boot_completed [2025-08-25 19:41:11][350792527055113][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:41:11][350792527055113][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:41:11][350792527055113][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:41:11][350792527055113][416 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 19:41:11][350792527055113][416 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 19:41:11][350792527055113][416 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:41:11][350792527055113][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792527055113\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1000\"}'\'' -e'"" [2025-08-25 19:41:11][350792527055113][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:41:11][350792527055113][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792527055113\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1000\"}'\'' -e'"" [2025-08-25 19:41:17][350792527055113][5632 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c750db63-694c-47fb-9915-5e058fdd736f","id":"QR_c750db63-694c-47fb-9915-5e058fdd736f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:41:17][350792527055113][5788 ms][DEBUG] proc_open done in 5372 ms; code=255; res.len=3343 [2025-08-25 19:41:17][350792527055113][5788 ms][DEBUG] END runCmdUntilRes#1 in 5372 ms [2025-08-25 19:41:17][350792527055113][5788 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:43:02][351726340331037][0 ms][INFO] === Request start === [2025-08-25 19:43:02][351726340331037][1 ms][DEBUG] START check_scloud [2025-08-25 19:43:02][351726340331037][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:43:02][351726340331037][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 28009 13469 24152336 161000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:43:02][351726340331037][317 ms][DEBUG] targetPkg: running [2025-08-25 19:43:02][351726340331037][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-25 19:43:02][351726340331037][317 ms][DEBUG] START check_boot_completed [2025-08-25 19:43:02][351726340331037][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:43:02][351726340331037][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:43:02][351726340331037][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:43:02][351726340331037][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:43:02][351726340331037][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:43:02][351726340331037][426 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:43:02][351726340331037][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351726340331037\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2608\"}'\'' -e'"" [2025-08-25 19:43:02][351726340331037][426 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:43:02][351726340331037][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351726340331037\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2608\"}'\'' -e'"" [2025-08-25 19:43:07][351726340331037][4972 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d469448a-affa-433b-82d9-f26ee62f0789","id":"QR_d469448a-affa-433b-82d9-f26ee62f0789","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:43:07][351726340331037][5128 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-08-25 19:43:07][351726340331037][5128 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-08-25 19:43:07][351726340331037][5128 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:47:04][350814495577652][1 ms][INFO] === Request start === [2025-08-25 19:47:04][350814495577652][1 ms][DEBUG] START check_scloud [2025-08-25 19:47:04][350814495577652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:47:05][350814495577652][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 28009 13469 24268212 172172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:47:05][350814495577652][295 ms][DEBUG] targetPkg: running [2025-08-25 19:47:05][350814495577652][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-25 19:47:05][350814495577652][295 ms][DEBUG] START check_boot_completed [2025-08-25 19:47:05][350814495577652][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:47:05][350814495577652][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 19:47:05][350814495577652][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:47:05][350814495577652][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:47:05][350814495577652][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 19:47:05][350814495577652][374 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:47:05][350814495577652][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495577652\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3790\"}'\'' -e'"" [2025-08-25 19:47:05][350814495577652][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:47:05][350814495577652][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495577652\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3790\"}'\'' -e'"" [2025-08-25 19:47:09][350814495577652][4482 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_236fe9bd-7168-499f-8319-14c2883a9b2f","id":"QR_236fe9bd-7168-499f-8319-14c2883a9b2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:47:09][350814495577652][4638 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-25 19:47:09][350814495577652][4638 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-25 19:47:09][350814495577652][4638 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:47:11][357967974895061][1 ms][INFO] === Request start === [2025-08-25 19:47:11][357967974895061][1 ms][DEBUG] START check_scloud [2025-08-25 19:47:11][357967974895061][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:47:12][357967974895061][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 28009 13469 24438460 183508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:47:12][357967974895061][296 ms][DEBUG] targetPkg: running [2025-08-25 19:47:12][357967974895061][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-25 19:47:12][357967974895061][296 ms][DEBUG] START check_boot_completed [2025-08-25 19:47:12][357967974895061][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:47:12][357967974895061][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:47:12][357967974895061][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:47:12][357967974895061][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:47:12][357967974895061][390 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:47:12][357967974895061][390 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:47:12][357967974895061][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967974895061\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2333\"}'\'' -e'"" [2025-08-25 19:47:12][357967974895061][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:47:12][357967974895061][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967974895061\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2333\"}'\'' -e'"" [2025-08-25 19:47:15][357967974895061][3967 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2c9c0a4-4e43-40ca-b616-11358fecc833","id":"QR_b2c9c0a4-4e43-40ca-b616-11358fecc833","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:47:15][357967974895061][4123 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-25 19:47:15][357967974895061][4123 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-25 19:47:15][357967974895061][4123 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:48:04][351877472987888][0 ms][INFO] === Request start === [2025-08-25 19:48:04][351877472987888][1 ms][DEBUG] START check_scloud [2025-08-25 19:48:04][351877472987888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:48:04][351877472987888][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 28009 13469 24574332 194812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:48:04][351877472987888][311 ms][DEBUG] targetPkg: running [2025-08-25 19:48:04][351877472987888][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 19:48:04][351877472987888][312 ms][DEBUG] START check_boot_completed [2025-08-25 19:48:04][351877472987888][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:48:04][351877472987888][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:48:04][351877472987888][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:48:04][351877472987888][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:48:04][351877472987888][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:48:04][351877472987888][421 ms][DEBUG] START check_internet [2025-08-25 19:48:04][351877472987888][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:48:04][351877472987888][952 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.244/205.244/205.244/0.000 ms\n [2025-08-25 19:48:04][351877472987888][952 ms][DEBUG] check_internet: online [2025-08-25 19:48:04][351877472987888][952 ms][DEBUG] END check_internet in 531 ms [2025-08-25 19:48:04][351877472987888][952 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:48:04][351877472987888][952 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472987888\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1980\"}'\'' -e'"" [2025-08-25 19:48:04][351877472987888][952 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:48:04][351877472987888][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472987888\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1980\"}'\'' -e'"" [2025-08-25 19:48:08][351877472987888][4826 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8257311c-d72b-4040-b995-b30384b7ad1e","id":"QR_8257311c-d72b-4040-b995-b30384b7ad1e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:48:08][351877472987888][4982 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-25 19:48:08][351877472987888][4982 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-25 19:48:08][351877472987888][4982 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:51:04][351864711226021][1 ms][INFO] === Request start === [2025-08-25 19:51:04][351864711226021][1 ms][DEBUG] START check_scloud [2025-08-25 19:51:04][351864711226021][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:51:04][351864711226021][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 28009 13469 24718816 206780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:51:04][351864711226021][277 ms][DEBUG] targetPkg: running [2025-08-25 19:51:04][351864711226021][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-25 19:51:04][351864711226021][277 ms][DEBUG] START check_boot_completed [2025-08-25 19:51:04][351864711226021][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:51:04][351864711226021][308 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 19:51:04][351864711226021][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:51:05][351864711226021][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:51:05][351864711226021][355 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 19:51:05][351864711226021][355 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:51:05][351864711226021][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864711226021\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6665\"}'\'' -e'"" [2025-08-25 19:51:05][351864711226021][355 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:51:05][351864711226021][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864711226021\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6665\"}'\'' -e'"" [2025-08-25 19:51:10][351864711226021][5619 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21f3927e-ef90-4395-87dd-bd0ea8df02ef","id":"QR_21f3927e-ef90-4395-87dd-bd0ea8df02ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:51:10][351864711226021][5775 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-25 19:51:10][351864711226021][5775 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-08-25 19:51:10][351864711226021][5775 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:53:04][350039930378561][0 ms][INFO] === Request start === [2025-08-25 19:53:04][350039930378561][1 ms][DEBUG] START check_scloud [2025-08-25 19:53:04][350039930378561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:53:05][350039930378561][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 28009 13469 24836804 194076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:53:05][350039930378561][259 ms][DEBUG] targetPkg: running [2025-08-25 19:53:05][350039930378561][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-25 19:53:05][350039930378561][259 ms][DEBUG] START check_boot_completed [2025-08-25 19:53:05][350039930378561][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:53:05][350039930378561][306 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:53:05][350039930378561][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:53:05][350039930378561][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:53:05][350039930378561][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:53:05][350039930378561][353 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:53:05][350039930378561][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039930378561\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5090\"}'\'' -e'"" [2025-08-25 19:53:05][350039930378561][353 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:53:05][350039930378561][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039930378561\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5090\"}'\'' -e'"" [2025-08-25 19:53:10][350039930378561][5273 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9564825a-6b24-4537-9f78-19055164496c","id":"QR_9564825a-6b24-4537-9f78-19055164496c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:53:10][350039930378561][5429 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-08-25 19:53:10][350039930378561][5429 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-08-25 19:53:10][350039930378561][5430 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:54:03][352677531025707][1 ms][INFO] === Request start === [2025-08-25 19:54:03][352677531025707][1 ms][DEBUG] START check_scloud [2025-08-25 19:54:03][352677531025707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:54:03][352677531025707][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 28009 13469 24991656 205004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:54:03][352677531025707][306 ms][DEBUG] targetPkg: running [2025-08-25 19:54:03][352677531025707][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 19:54:03][352677531025707][306 ms][DEBUG] START check_boot_completed [2025-08-25 19:54:03][352677531025707][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:54:03][352677531025707][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:54:03][352677531025707][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:54:03][352677531025707][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:54:03][352677531025707][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:54:03][352677531025707][399 ms][DEBUG] START check_internet [2025-08-25 19:54:03][352677531025707][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:54:04][352677531025707][883 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.421/202.421/202.421/0.000 ms\n [2025-08-25 19:54:04][352677531025707][883 ms][DEBUG] check_internet: online [2025-08-25 19:54:04][352677531025707][883 ms][DEBUG] END check_internet in 485 ms [2025-08-25 19:54:04][352677531025707][883 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:54:04][352677531025707][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531025707\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8939\"}'\'' -e'"" [2025-08-25 19:54:04][352677531025707][884 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:54:04][352677531025707][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531025707\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8939\"}'\'' -e'"" [2025-08-25 19:54:08][352677531025707][4742 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70cb1ab9-87a5-4bb2-8457-d5e9960035ac","id":"QR_70cb1ab9-87a5-4bb2-8457-d5e9960035ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:54:08][352677531025707][4898 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-25 19:54:08][352677531025707][4898 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-25 19:54:08][352677531025707][4898 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:56:03][352549931577803][0 ms][INFO] === Request start === [2025-08-25 19:56:03][352549931577803][1 ms][DEBUG] START check_scloud [2025-08-25 19:56:03][352549931577803][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:56:04][352549931577803][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 28009 13469 25127884 215748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:56:04][352549931577803][307 ms][DEBUG] targetPkg: running [2025-08-25 19:56:04][352549931577803][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 19:56:04][352549931577803][307 ms][DEBUG] START check_boot_completed [2025-08-25 19:56:04][352549931577803][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:56:04][352549931577803][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:56:04][352549931577803][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:56:04][352549931577803][431 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 19:56:04][352549931577803][432 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 19:56:04][352549931577803][432 ms][DEBUG] START check_internet [2025-08-25 19:56:04][352549931577803][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:56:04][352549931577803][916 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.694/201.694/201.694/0.000 ms\n [2025-08-25 19:56:04][352549931577803][916 ms][DEBUG] check_internet: online [2025-08-25 19:56:04][352549931577803][916 ms][DEBUG] END check_internet in 485 ms [2025-08-25 19:56:04][352549931577803][916 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:56:04][352549931577803][916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549931577803\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5785\"}'\'' -e'"" [2025-08-25 19:56:04][352549931577803][916 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:56:04][352549931577803][916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549931577803\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5785\"}'\'' -e'"" [2025-08-25 19:56:08][352549931577803][5040 ms][DEBUG] proc_open done in 4124 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 19:56:08][352549931577803][5040 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-25 19:56:08][352549931577803][5040 ms][WARN] Detected error: Process with pid 28009 either refused to load frida-agent, or terminated during injection [2025-08-25 19:56:08][352549931577803][5040 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 19:56:08][352549931577803][5197 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 19:56:08][352549931577803][5197 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 19:56:08][352549931577803][5197 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 19:56:09][352549931577803][5321 ms][DEBUG] SU: done in 124 ms; out [2025-08-25 19:56:09][352549931577803][5321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 19:56:09][352549931577803][5493 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 19:56:11][352549931577803][7508 ms][DEBUG] START check_boot_completed [2025-08-25 19:56:11][352549931577803][7508 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:56:11][352549931577803][7555 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:56:11][352549931577803][7555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:56:11][352549931577803][7602 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:56:11][352549931577803][7602 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:56:14][352549931577803][10617 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 19:56:14][352549931577803][10617 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549931577803\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5785\"}'\'' -e'"" [2025-08-25 19:56:18][352549931577803][14334 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e126b15-8bb2-4d80-b1d0-e436dd9ea521","id":"QR_5e126b15-8bb2-4d80-b1d0-e436dd9ea521","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:56:18][352549931577803][14491 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-25 19:56:18][352549931577803][14491 ms][DEBUG] END runCmdUntilRes#2 in 3874 ms [2025-08-25 19:56:18][352549931577803][14491 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:57:04][356045399014872][1 ms][INFO] === Request start === [2025-08-25 19:57:04][356045399014872][1 ms][DEBUG] START check_scloud [2025-08-25 19:57:04][356045399014872][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:57:04][356045399014872][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 30110 13469 23689748 128360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:57:04][356045399014872][289 ms][DEBUG] targetPkg: running [2025-08-25 19:57:04][356045399014872][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-25 19:57:04][356045399014872][289 ms][DEBUG] START check_boot_completed [2025-08-25 19:57:04][356045399014872][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:57:04][356045399014872][335 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:57:04][356045399014872][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:57:04][356045399014872][398 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:57:04][356045399014872][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:57:04][356045399014872][398 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:57:04][356045399014872][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356045399014872\",\"model\":\"SM-S901U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7693\"}'\'' -e'"" [2025-08-25 19:57:04][356045399014872][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:57:04][356045399014872][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356045399014872\",\"model\":\"SM-S901U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7693\"}'\'' -e'"" [2025-08-25 19:57:09][356045399014872][5225 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ebd82f3-78e1-48ab-b5fd-b8d0ace6a9ff","id":"QR_0ebd82f3-78e1-48ab-b5fd-b8d0ace6a9ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:57:09][356045399014872][5381 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-08-25 19:57:09][356045399014872][5381 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-08-25 19:57:09][356045399014872][5381 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:58:03][354306210015999][0 ms][INFO] === Request start === [2025-08-25 19:58:03][354306210015999][1 ms][DEBUG] START check_scloud [2025-08-25 19:58:03][354306210015999][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:58:03][354306210015999][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 30110 13469 23853524 138500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:58:03][354306210015999][318 ms][DEBUG] targetPkg: running [2025-08-25 19:58:03][354306210015999][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 19:58:03][354306210015999][318 ms][DEBUG] START check_boot_completed [2025-08-25 19:58:03][354306210015999][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:58:03][354306210015999][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:58:03][354306210015999][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:58:03][354306210015999][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 19:58:03][354306210015999][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 19:58:03][354306210015999][427 ms][DEBUG] START check_internet [2025-08-25 19:58:03][354306210015999][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:58:04][354306210015999][725 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.952/198.952/198.952/0.000 ms\n [2025-08-25 19:58:04][354306210015999][725 ms][DEBUG] check_internet: online [2025-08-25 19:58:04][354306210015999][725 ms][DEBUG] END check_internet in 297 ms [2025-08-25 19:58:04][354306210015999][725 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:58:04][354306210015999][725 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354306210015999\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7243\"}'\'' -e'"" [2025-08-25 19:58:04][354306210015999][725 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:58:04][354306210015999][725 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354306210015999\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7243\"}'\'' -e'"" [2025-08-25 19:58:08][354306210015999][4879 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3aa7adcc-2bae-4d62-a385-080bd172ec5d","id":"QR_3aa7adcc-2bae-4d62-a385-080bd172ec5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:58:08][354306210015999][5035 ms][DEBUG] proc_open done in 4310 ms; code=255; res.len=3343 [2025-08-25 19:58:08][354306210015999][5035 ms][DEBUG] END runCmdUntilRes#1 in 4310 ms [2025-08-25 19:58:08][354306210015999][5035 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:58:11][357262974418464][0 ms][INFO] === Request start === [2025-08-25 19:58:11][357262974418464][1 ms][DEBUG] START check_scloud [2025-08-25 19:58:11][357262974418464][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:58:11][357262974418464][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 30110 13469 24015120 150184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:58:11][357262974418464][301 ms][DEBUG] targetPkg: running [2025-08-25 19:58:11][357262974418464][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-25 19:58:11][357262974418464][301 ms][DEBUG] START check_boot_completed [2025-08-25 19:58:11][357262974418464][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:58:11][357262974418464][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:58:11][357262974418464][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:58:11][357262974418464][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:58:11][357262974418464][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:58:11][357262974418464][394 ms][DEBUG] START check_internet [2025-08-25 19:58:11][357262974418464][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:58:11][357262974418464][645 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.059/142.059/142.059/0.000 ms\n [2025-08-25 19:58:11][357262974418464][645 ms][DEBUG] check_internet: online [2025-08-25 19:58:11][357262974418464][645 ms][DEBUG] END check_internet in 250 ms [2025-08-25 19:58:11][357262974418464][645 ms][DEBUG] rawBody.length=1148 [2025-08-25 19:58:11][357262974418464][645 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262974418464\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9308\"}'\'' -e'"" [2025-08-25 19:58:11][357262974418464][645 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:58:11][357262974418464][645 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262974418464\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9308\"}'\'' -e'"" [2025-08-25 19:58:15][357262974418464][4222 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_32c92405-d2fd-488b-9d84-a679d5ff3a28","id":"QR_32c92405-d2fd-488b-9d84-a679d5ff3a28","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:58:15][357262974418464][4378 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-25 19:58:15][357262974418464][4378 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-25 19:58:15][357262974418464][4378 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:58:19][356171110216255][0 ms][INFO] === Request start === [2025-08-25 19:58:19][356171110216255][1 ms][DEBUG] START check_scloud [2025-08-25 19:58:19][356171110216255][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:58:19][356171110216255][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 30110 13469 24192536 161040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:58:19][356171110216255][310 ms][DEBUG] targetPkg: running [2025-08-25 19:58:19][356171110216255][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 19:58:19][356171110216255][310 ms][DEBUG] START check_boot_completed [2025-08-25 19:58:19][356171110216255][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:58:19][356171110216255][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 19:58:19][356171110216255][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:58:19][356171110216255][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:58:19][356171110216255][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 19:58:19][356171110216255][403 ms][DEBUG] START check_internet [2025-08-25 19:58:19][356171110216255][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 19:58:19][356171110216255][731 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.769/221.769/221.769/0.000 ms\n [2025-08-25 19:58:19][356171110216255][731 ms][DEBUG] check_internet: online [2025-08-25 19:58:19][356171110216255][731 ms][DEBUG] END check_internet in 328 ms [2025-08-25 19:58:19][356171110216255][731 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:58:19][356171110216255][731 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356171110216255\",\"model\":\"SM-A516U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9686\"}'\'' -e'"" [2025-08-25 19:58:19][356171110216255][731 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:58:19][356171110216255][731 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356171110216255\",\"model\":\"SM-A516U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9686\"}'\'' -e'"" [2025-08-25 19:58:25][356171110216255][5824 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc5ee50f-5f04-4a5d-87b7-30005e48d354","id":"QR_fc5ee50f-5f04-4a5d-87b7-30005e48d354","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:58:25][356171110216255][5980 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-08-25 19:58:25][356171110216255][5980 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-08-25 19:58:25][356171110216255][5980 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 19:59:04][357651713400041][0 ms][INFO] === Request start === [2025-08-25 19:59:04][357651713400041][1 ms][DEBUG] START check_scloud [2025-08-25 19:59:04][357651713400041][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 19:59:04][357651713400041][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 30110 13469 24263284 172896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 19:59:04][357651713400041][317 ms][DEBUG] targetPkg: running [2025-08-25 19:59:04][357651713400041][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 19:59:04][357651713400041][317 ms][DEBUG] START check_boot_completed [2025-08-25 19:59:04][357651713400041][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 19:59:04][357651713400041][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 19:59:04][357651713400041][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 19:59:04][357651713400041][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 19:59:04][357651713400041][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 19:59:04][357651713400041][411 ms][DEBUG] rawBody.length=1149 [2025-08-25 19:59:04][357651713400041][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651713400041\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6637\"}'\'' -e'"" [2025-08-25 19:59:04][357651713400041][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 19:59:04][357651713400041][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651713400041\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6637\"}'\'' -e'"" [2025-08-25 19:59:09][357651713400041][5003 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8868e336-09f8-49ec-8103-e4d9cb79b856","id":"QR_8868e336-09f8-49ec-8103-e4d9cb79b856","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 19:59:09][357651713400041][5160 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=3343 [2025-08-25 19:59:09][357651713400041][5160 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-08-25 19:59:09][357651713400041][5160 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:00:05][351168510621717][1 ms][INFO] === Request start === [2025-08-25 20:00:05][351168510621717][1 ms][DEBUG] START check_scloud [2025-08-25 20:00:05][351168510621717][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:00:05][351168510621717][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 30110 13469 24411864 183724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:00:05][351168510621717][298 ms][DEBUG] targetPkg: running [2025-08-25 20:00:05][351168510621717][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 20:00:05][351168510621717][298 ms][DEBUG] START check_boot_completed [2025-08-25 20:00:05][351168510621717][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:00:05][351168510621717][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:00:05][351168510621717][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:00:05][351168510621717][423 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 20:00:05][351168510621717][423 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 20:00:05][351168510621717][423 ms][DEBUG] START check_internet [2025-08-25 20:00:05][351168510621717][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:00:05][351168510621717][673 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.839/139.839/139.839/0.000 ms\n [2025-08-25 20:00:05][351168510621717][673 ms][DEBUG] check_internet: online [2025-08-25 20:00:05][351168510621717][674 ms][DEBUG] END check_internet in 251 ms [2025-08-25 20:00:05][351168510621717][674 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:00:05][351168510621717][674 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351168510621717\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8611\"}'\'' -e'"" [2025-08-25 20:00:05][351168510621717][674 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:00:05][351168510621717][674 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351168510621717\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8611\"}'\'' -e'"" [2025-08-25 20:00:10][351168510621717][5297 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_451b6d86-7f55-4d65-b7a9-a083753e092d","id":"QR_451b6d86-7f55-4d65-b7a9-a083753e092d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:00:10][351168510621717][5453 ms][DEBUG] proc_open done in 4779 ms; code=255; res.len=3343 [2025-08-25 20:00:10][351168510621717][5453 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-08-25 20:00:10][351168510621717][5453 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:02:03][354485115414927][0 ms][INFO] === Request start === [2025-08-25 20:02:03][354485115414927][0 ms][DEBUG] START check_scloud [2025-08-25 20:02:03][354485115414927][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:02:04][354485115414927][291 ms][DEBUG] SU: done in 291 ms; outu0_a118 30110 13469 24529724 195000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:02:04][354485115414927][291 ms][DEBUG] targetPkg: running [2025-08-25 20:02:04][354485115414927][291 ms][DEBUG] END check_scloud in 291 ms [2025-08-25 20:02:04][354485115414927][291 ms][DEBUG] START check_boot_completed [2025-08-25 20:02:04][354485115414927][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:02:04][354485115414927][322 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 20:02:04][354485115414927][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:02:04][354485115414927][369 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:02:04][354485115414927][369 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 20:02:04][354485115414927][369 ms][DEBUG] START check_internet [2025-08-25 20:02:04][354485115414927][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:02:04][354485115414927][806 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.583/201.583/201.583/0.000 ms\n [2025-08-25 20:02:04][354485115414927][806 ms][DEBUG] check_internet: online [2025-08-25 20:02:04][354485115414927][806 ms][DEBUG] END check_internet in 437 ms [2025-08-25 20:02:04][354485115414927][806 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:02:04][354485115414927][806 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485115414927\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5572\"}'\'' -e'"" [2025-08-25 20:02:04][354485115414927][806 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:02:04][354485115414927][806 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485115414927\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5572\"}'\'' -e'"" [2025-08-25 20:02:08][354485115414927][4837 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e6cbb1d-c148-44f8-88cb-dfd012803a4d","id":"QR_0e6cbb1d-c148-44f8-88cb-dfd012803a4d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:02:08][354485115414927][4993 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-25 20:02:08][354485115414927][4993 ms][DEBUG] END runCmdUntilRes#1 in 4187 ms [2025-08-25 20:02:08][354485115414927][4993 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:06:04][350915067493374][1 ms][INFO] === Request start === [2025-08-25 20:06:04][350915067493374][1 ms][DEBUG] START check_scloud [2025-08-25 20:06:04][350915067493374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:06:05][350915067493374][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 30110 13469 24682528 206916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:06:05][350915067493374][258 ms][DEBUG] targetPkg: running [2025-08-25 20:06:05][350915067493374][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-25 20:06:05][350915067493374][258 ms][DEBUG] START check_boot_completed [2025-08-25 20:06:05][350915067493374][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:06:05][350915067493374][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 20:06:05][350915067493374][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:06:05][350915067493374][338 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 20:06:05][350915067493374][338 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-25 20:06:05][350915067493374][338 ms][DEBUG] START check_internet [2025-08-25 20:06:05][350915067493374][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:06:05][350915067493374][773 ms][DEBUG] SU: done in 436 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.252/200.252/200.252/0.000 ms\n [2025-08-25 20:06:05][350915067493374][773 ms][DEBUG] check_internet: online [2025-08-25 20:06:05][350915067493374][773 ms][DEBUG] END check_internet in 436 ms [2025-08-25 20:06:05][350915067493374][773 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:06:05][350915067493374][773 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915067493374\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6238\"}'\'' -e'"" [2025-08-25 20:06:05][350915067493374][773 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:06:05][350915067493374][773 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915067493374\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6238\"}'\'' -e'"" [2025-08-25 20:06:10][350915067493374][5694 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a9adcb3-1c62-44f7-ad02-49f2233ecede","id":"QR_0a9adcb3-1c62-44f7-ad02-49f2233ecede","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:06:10][350915067493374][5850 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-08-25 20:06:10][350915067493374][5850 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-08-25 20:06:10][350915067493374][5850 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:06:15][352610711387092][0 ms][INFO] === Request start === [2025-08-25 20:06:15][352610711387092][1 ms][DEBUG] START check_scloud [2025-08-25 20:06:15][352610711387092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:06:15][352610711387092][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 30110 13469 24808616 218712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:06:15][352610711387092][327 ms][DEBUG] targetPkg: running [2025-08-25 20:06:15][352610711387092][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-25 20:06:15][352610711387092][327 ms][DEBUG] START check_boot_completed [2025-08-25 20:06:15][352610711387092][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:06:15][352610711387092][374 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:06:15][352610711387092][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:06:15][352610711387092][420 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:06:15][352610711387092][420 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 20:06:15][352610711387092][420 ms][DEBUG] START check_internet [2025-08-25 20:06:15][352610711387092][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:06:16][352610711387092][764 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.682/236.682/236.682/0.000 ms\n [2025-08-25 20:06:16][352610711387092][764 ms][DEBUG] check_internet: online [2025-08-25 20:06:16][352610711387092][764 ms][DEBUG] END check_internet in 344 ms [2025-08-25 20:06:16][352610711387092][764 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:06:16][352610711387092][764 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610711387092\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GFI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3559\"}'\'' -e'"" [2025-08-25 20:06:16][352610711387092][765 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:06:16][352610711387092][765 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610711387092\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GFI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3559\"}'\'' -e'"" [2025-08-25 20:06:20][352610711387092][4685 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc3fe1c6-e673-488d-8519-95573239b953","id":"QR_dc3fe1c6-e673-488d-8519-95573239b953","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:06:20][352610711387092][4841 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-25 20:06:20][352610711387092][4841 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-25 20:06:20][352610711387092][4841 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:10:04][350849442137507][1 ms][INFO] === Request start === [2025-08-25 20:10:04][350849442137507][1 ms][DEBUG] START check_scloud [2025-08-25 20:10:04][350849442137507][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:10:04][350849442137507][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 30110 13469 24953064 230940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:10:04][350849442137507][256 ms][DEBUG] targetPkg: running [2025-08-25 20:10:04][350849442137507][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-25 20:10:04][350849442137507][256 ms][DEBUG] START check_boot_completed [2025-08-25 20:10:04][350849442137507][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:10:04][350849442137507][288 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 20:10:04][350849442137507][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:10:04][350849442137507][334 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:10:04][350849442137507][334 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 20:10:04][350849442137507][334 ms][DEBUG] START check_internet [2025-08-25 20:10:04][350849442137507][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:10:04][350849442137507][601 ms][DEBUG] SU: done in 267 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=170 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 170.298/170.298/170.298/0.000 ms\n [2025-08-25 20:10:04][350849442137507][601 ms][DEBUG] check_internet: online [2025-08-25 20:10:04][350849442137507][602 ms][DEBUG] END check_internet in 267 ms [2025-08-25 20:10:04][350849442137507][602 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:10:04][350849442137507][602 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350849442137507\",\"model\":\"SM-S921W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7527\"}'\'' -e'"" [2025-08-25 20:10:04][350849442137507][602 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:10:04][350849442137507][602 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350849442137507\",\"model\":\"SM-S921W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7527\"}'\'' -e'"" [2025-08-25 20:10:09][350849442137507][5458 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ec8ffb5-3452-4403-85e3-cf7b61071d9e","id":"QR_2ec8ffb5-3452-4403-85e3-cf7b61071d9e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:10:09][350849442137507][5614 ms][DEBUG] proc_open done in 5013 ms; code=255; res.len=3343 [2025-08-25 20:10:09][350849442137507][5614 ms][DEBUG] END runCmdUntilRes#1 in 5013 ms [2025-08-25 20:10:09][350849442137507][5614 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:12:04][350938282565263][0 ms][INFO] === Request start === [2025-08-25 20:12:04][350938282565263][1 ms][DEBUG] START check_scloud [2025-08-25 20:12:04][350938282565263][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:12:04][350938282565263][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 30110 13469 25060816 161884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:12:04][350938282565263][276 ms][DEBUG] targetPkg: running [2025-08-25 20:12:04][350938282565263][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-25 20:12:04][350938282565263][276 ms][DEBUG] START check_boot_completed [2025-08-25 20:12:04][350938282565263][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:12:04][350938282565263][323 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:12:04][350938282565263][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:12:04][350938282565263][385 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 20:12:04][350938282565263][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 20:12:04][350938282565263][385 ms][DEBUG] START check_internet [2025-08-25 20:12:04][350938282565263][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:12:05][350938282565263][901 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.148/202.148/202.148/0.000 ms\n [2025-08-25 20:12:05][350938282565263][901 ms][DEBUG] check_internet: online [2025-08-25 20:12:05][350938282565263][901 ms][DEBUG] END check_internet in 515 ms [2025-08-25 20:12:05][350938282565263][901 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:12:05][350938282565263][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282565263\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4916\"}'\'' -e'"" [2025-08-25 20:12:05][350938282565263][901 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:12:05][350938282565263][901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282565263\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4916\"}'\'' -e'"" [2025-08-25 20:12:10][350938282565263][5790 ms][DEBUG] proc_open done in 4889 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 20:12:10][350938282565263][5791 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-08-25 20:12:10][350938282565263][5791 ms][WARN] Detected error: Process with pid 30110 either refused to load frida-agent, or terminated during injection [2025-08-25 20:12:10][350938282565263][5791 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 20:12:10][350938282565263][5962 ms][DEBUG] SU: done in 171 ms; out [2025-08-25 20:12:10][350938282565263][5962 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 20:12:10][350938282565263][5962 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 20:12:10][350938282565263][6150 ms][DEBUG] SU: done in 187 ms; out [2025-08-25 20:12:10][350938282565263][6150 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 20:12:10][350938282565263][6384 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 20:12:12][350938282565263][8399 ms][DEBUG] START check_boot_completed [2025-08-25 20:12:12][350938282565263][8399 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:12:12][350938282565263][8446 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:12:12][350938282565263][8446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:12:12][350938282565263][8508 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 20:12:12][350938282565263][8508 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 20:12:15][350938282565263][11523 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 20:12:15][350938282565263][11523 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282565263\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4916\"}'\'' -e'"" [2025-08-25 20:12:19][350938282565263][15616 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2f747f6-be8a-4f12-a09c-4b9420bf8ff2","id":"QR_e2f747f6-be8a-4f12-a09c-4b9420bf8ff2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:12:19][350938282565263][15772 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-25 20:12:19][350938282565263][15772 ms][DEBUG] END runCmdUntilRes#2 in 4249 ms [2025-08-25 20:12:19][350938282565263][15772 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:13:03][358223750319994][1 ms][INFO] === Request start === [2025-08-25 20:13:03][358223750319994][1 ms][DEBUG] START check_scloud [2025-08-25 20:13:03][358223750319994][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:13:04][358223750319994][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 535 13469 23660560 126308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:13:04][358223750319994][311 ms][DEBUG] targetPkg: running [2025-08-25 20:13:04][358223750319994][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-25 20:13:04][358223750319994][311 ms][DEBUG] START check_boot_completed [2025-08-25 20:13:04][358223750319994][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:13:04][358223750319994][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:13:04][358223750319994][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:13:04][358223750319994][406 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 20:13:04][358223750319994][406 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 20:13:04][358223750319994][407 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:13:04][358223750319994][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358223750319994\",\"model\":\"SM-F741B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8352\"}'\'' -e'"" [2025-08-25 20:13:04][358223750319994][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:13:04][358223750319994][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358223750319994\",\"model\":\"SM-F741B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8352\"}'\'' -e'"" [2025-08-25 20:13:07][358223750319994][4044 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a102d6d6-4a69-4c50-9b5a-2af01c4cb546","id":"QR_a102d6d6-4a69-4c50-9b5a-2af01c4cb546","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:13:07][358223750319994][4200 ms][DEBUG] proc_open done in 3793 ms; code=255; res.len=3343 [2025-08-25 20:13:07][358223750319994][4200 ms][DEBUG] END runCmdUntilRes#1 in 3794 ms [2025-08-25 20:13:07][358223750319994][4200 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:14:03][352549937170843][0 ms][INFO] === Request start === [2025-08-25 20:14:03][352549937170843][1 ms][DEBUG] START check_scloud [2025-08-25 20:14:03][352549937170843][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:14:04][352549937170843][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 535 13469 23801012 136984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:14:04][352549937170843][312 ms][DEBUG] targetPkg: running [2025-08-25 20:14:04][352549937170843][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 20:14:04][352549937170843][312 ms][DEBUG] START check_boot_completed [2025-08-25 20:14:04][352549937170843][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:14:04][352549937170843][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 20:14:04][352549937170843][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:14:04][352549937170843][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:14:04][352549937170843][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 20:14:04][352549937170843][390 ms][DEBUG] START check_internet [2025-08-25 20:14:04][352549937170843][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:14:04][352549937170843][640 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.164/140.164/140.164/0.000 ms\n [2025-08-25 20:14:04][352549937170843][640 ms][DEBUG] check_internet: online [2025-08-25 20:14:04][352549937170843][640 ms][DEBUG] END check_internet in 250 ms [2025-08-25 20:14:04][352549937170843][640 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:14:04][352549937170843][640 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549937170843\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4027\"}'\'' -e'"" [2025-08-25 20:14:04][352549937170843][640 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:14:04][352549937170843][640 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549937170843\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4027\"}'\'' -e'"" [2025-08-25 20:14:08][352549937170843][4545 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73999b8e-1703-4c5e-ae7b-c0589f10f0b1","id":"QR_73999b8e-1703-4c5e-ae7b-c0589f10f0b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:14:08][352549937170843][4702 ms][DEBUG] proc_open done in 4062 ms; code=255; res.len=3343 [2025-08-25 20:14:08][352549937170843][4702 ms][DEBUG] END runCmdUntilRes#1 in 4062 ms [2025-08-25 20:14:08][352549937170843][4702 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:15:04][350168310414777][0 ms][INFO] === Request start === [2025-08-25 20:15:04][350168310414777][0 ms][DEBUG] START check_scloud [2025-08-25 20:15:04][350168310414777][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:15:04][350168310414777][255 ms][DEBUG] SU: done in 255 ms; outu0_a118 535 13469 23907016 150328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:15:04][350168310414777][255 ms][DEBUG] targetPkg: running [2025-08-25 20:15:04][350168310414777][255 ms][DEBUG] END check_scloud in 255 ms [2025-08-25 20:15:04][350168310414777][255 ms][DEBUG] START check_boot_completed [2025-08-25 20:15:04][350168310414777][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:15:04][350168310414777][302 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:15:04][350168310414777][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:15:04][350168310414777][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:15:04][350168310414777][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 20:15:04][350168310414777][349 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:15:04][350168310414777][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350168310414777\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2650\"}'\'' -e'"" [2025-08-25 20:15:04][350168310414777][349 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:15:04][350168310414777][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350168310414777\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2650\"}'\'' -e'"" [2025-08-25 20:15:10][350168310414777][5691 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_070f3fd2-6aaa-4afa-8fba-47f79ada947b","id":"QR_070f3fd2-6aaa-4afa-8fba-47f79ada947b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:15:10][350168310414777][5847 ms][DEBUG] proc_open done in 5499 ms; code=255; res.len=3343 [2025-08-25 20:15:10][350168310414777][5848 ms][DEBUG] END runCmdUntilRes#1 in 5499 ms [2025-08-25 20:15:10][350168310414777][5848 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:18:04][350776862561801][1 ms][INFO] === Request start === [2025-08-25 20:18:04][350776862561801][1 ms][DEBUG] START check_scloud [2025-08-25 20:18:04][350776862561801][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:18:04][350776862561801][273 ms][DEBUG] SU: done in 271 ms; outu0_a118 535 13469 24039276 161384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:18:04][350776862561801][273 ms][DEBUG] targetPkg: running [2025-08-25 20:18:04][350776862561801][273 ms][DEBUG] END check_scloud in 271 ms [2025-08-25 20:18:04][350776862561801][273 ms][DEBUG] START check_boot_completed [2025-08-25 20:18:04][350776862561801][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:18:04][350776862561801][304 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 20:18:04][350776862561801][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:18:04][350776862561801][366 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 20:18:04][350776862561801][367 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 20:18:04][350776862561801][367 ms][DEBUG] START check_internet [2025-08-25 20:18:04][350776862561801][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:18:05][350776862561801][851 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.671/200.671/200.671/0.000 ms\n [2025-08-25 20:18:05][350776862561801][851 ms][DEBUG] check_internet: online [2025-08-25 20:18:05][350776862561801][851 ms][DEBUG] END check_internet in 485 ms [2025-08-25 20:18:05][350776862561801][851 ms][DEBUG] rawBody.length=1150 [2025-08-25 20:18:05][350776862561801][851 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350776862561801\",\"model\":\"SM-S156VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9324\"}'\'' -e'"" [2025-08-25 20:18:05][350776862561801][851 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:18:05][350776862561801][851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350776862561801\",\"model\":\"SM-S156VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9324\"}'\'' -e'"" [2025-08-25 20:18:10][350776862561801][5896 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff667601-0528-4b0b-828a-70a1691aa172","id":"QR_ff667601-0528-4b0b-828a-70a1691aa172","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:18:10][350776862561801][6052 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-25 20:18:10][350776862561801][6052 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-25 20:18:10][350776862561801][6053 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:20:03][354595384897493][1 ms][INFO] === Request start === [2025-08-25 20:20:03][354595384897493][1 ms][DEBUG] START check_scloud [2025-08-25 20:20:03][354595384897493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:20:04][354595384897493][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 535 13469 24181840 173752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:20:04][354595384897493][302 ms][DEBUG] targetPkg: running [2025-08-25 20:20:04][354595384897493][302 ms][DEBUG] END check_scloud in 300 ms [2025-08-25 20:20:04][354595384897493][302 ms][DEBUG] START check_boot_completed [2025-08-25 20:20:04][354595384897493][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:20:04][354595384897493][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 20:20:04][354595384897493][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:20:04][354595384897493][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:20:04][354595384897493][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 20:20:04][354595384897493][380 ms][DEBUG] START check_internet [2025-08-25 20:20:04][354595384897493][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:20:04][354595384897493][630 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.367/149.367/149.367/0.000 ms\n [2025-08-25 20:20:04][354595384897493][630 ms][DEBUG] check_internet: online [2025-08-25 20:20:04][354595384897493][630 ms][DEBUG] END check_internet in 250 ms [2025-08-25 20:20:04][354595384897493][630 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:20:04][354595384897493][630 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595384897493\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8142\"}'\'' -e'"" [2025-08-25 20:20:04][354595384897493][630 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:20:04][354595384897493][630 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595384897493\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8142\"}'\'' -e'"" [2025-08-25 20:20:08][354595384897493][4769 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99fb62b1-4fd3-4f29-8e83-55bb0baf4aeb","id":"QR_99fb62b1-4fd3-4f29-8e83-55bb0baf4aeb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:20:08][354595384897493][4925 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-25 20:20:08][354595384897493][4926 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-25 20:20:08][354595384897493][4926 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:21:03][353310801029543][0 ms][INFO] === Request start === [2025-08-25 20:21:03][353310801029543][1 ms][DEBUG] START check_scloud [2025-08-25 20:21:03][353310801029543][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:21:03][353310801029543][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 535 13469 24313196 185648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:21:03][353310801029543][257 ms][DEBUG] targetPkg: running [2025-08-25 20:21:03][353310801029543][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-25 20:21:03][353310801029543][257 ms][DEBUG] START check_boot_completed [2025-08-25 20:21:03][353310801029543][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:21:03][353310801029543][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:21:03][353310801029543][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:21:03][353310801029543][366 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 20:21:03][353310801029543][366 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 20:21:03][353310801029543][366 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:21:03][353310801029543][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801029543\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3668\"}'\'' -e'"" [2025-08-25 20:21:03][353310801029543][366 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:21:03][353310801029543][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310801029543\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3668\"}'\'' -e'"" [2025-08-25 20:21:07][353310801029543][4209 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26be39ba-f3cb-4a9c-a764-f58dc5a58f26","id":"QR_26be39ba-f3cb-4a9c-a764-f58dc5a58f26","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:21:07][353310801029543][4365 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-25 20:21:07][353310801029543][4365 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-08-25 20:21:07][353310801029543][4365 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:22:05][358244108755994][1 ms][INFO] === Request start === [2025-08-25 20:22:05][358244108755994][1 ms][DEBUG] START check_scloud [2025-08-25 20:22:05][358244108755994][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:22:05][358244108755994][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 535 13469 24439376 197584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:22:05][358244108755994][304 ms][DEBUG] targetPkg: running [2025-08-25 20:22:05][358244108755994][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 20:22:05][358244108755994][305 ms][DEBUG] START check_boot_completed [2025-08-25 20:22:05][358244108755994][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:22:05][358244108755994][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:22:05][358244108755994][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:22:06][358244108755994][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 20:22:06][358244108755994][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 20:22:06][358244108755994][398 ms][DEBUG] START check_internet [2025-08-25 20:22:06][358244108755994][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:22:06][358244108755994][866 ms][DEBUG] SU: done in 467 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.736/202.736/202.736/0.000 ms\n [2025-08-25 20:22:06][358244108755994][866 ms][DEBUG] check_internet: online [2025-08-25 20:22:06][358244108755994][866 ms][DEBUG] END check_internet in 468 ms [2025-08-25 20:22:06][358244108755994][866 ms][DEBUG] rawBody.length=1159 [2025-08-25 20:22:06][358244108755994][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358244108755994\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YT20FJCWN\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1507\"}'\'' -e'"" [2025-08-25 20:22:06][358244108755994][867 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:22:06][358244108755994][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358244108755994\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YT20FJCWN\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1507\"}'\'' -e'"" [2025-08-25 20:22:11][358244108755994][5911 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14aab5c2-f16a-4bcb-853a-f3f98c6914a2","id":"QR_14aab5c2-f16a-4bcb-853a-f3f98c6914a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:22:11][358244108755994][6068 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-25 20:22:11][358244108755994][6068 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-25 20:22:11][358244108755994][6068 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:27:03][358385396247374][1 ms][INFO] === Request start === [2025-08-25 20:27:03][358385396247374][1 ms][DEBUG] START check_scloud [2025-08-25 20:27:03][358385396247374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:27:03][358385396247374][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 535 13469 24545076 210176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:27:03][358385396247374][313 ms][DEBUG] targetPkg: running [2025-08-25 20:27:03][358385396247374][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 20:27:03][358385396247374][314 ms][DEBUG] START check_boot_completed [2025-08-25 20:27:03][358385396247374][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:27:03][358385396247374][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:27:03][358385396247374][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:27:03][358385396247374][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 20:27:03][358385396247374][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 20:27:03][358385396247374][423 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:27:03][358385396247374][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385396247374\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5274\"}'\'' -e'"" [2025-08-25 20:27:03][358385396247374][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:27:03][358385396247374][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385396247374\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5274\"}'\'' -e'"" [2025-08-25 20:27:07][358385396247374][4422 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e66834a6-ae20-4912-a334-70b931719a88","id":"QR_e66834a6-ae20-4912-a334-70b931719a88","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:27:08][358385396247374][4578 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-08-25 20:27:08][358385396247374][4578 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-25 20:27:08][358385396247374][4578 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:27:10][352600229507091][0 ms][INFO] === Request start === [2025-08-25 20:27:10][352600229507091][1 ms][DEBUG] START check_scloud [2025-08-25 20:27:10][352600229507091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:27:10][352600229507091][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 535 13469 24671292 218840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:27:10][352600229507091][260 ms][DEBUG] targetPkg: running [2025-08-25 20:27:10][352600229507091][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-25 20:27:10][352600229507091][260 ms][DEBUG] START check_boot_completed [2025-08-25 20:27:10][352600229507091][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:27:10][352600229507091][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:27:10][352600229507091][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:27:11][352600229507091][385 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 20:27:11][352600229507091][385 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 20:27:11][352600229507091][386 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:27:11][352600229507091][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229507091\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8388\"}'\'' -e'"" [2025-08-25 20:27:11][352600229507091][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:27:11][352600229507091][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229507091\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8388\"}'\'' -e'"" [2025-08-25 20:27:14][352600229507091][3931 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14ef3c96-5077-48a2-a931-940308560ef8","id":"QR_14ef3c96-5077-48a2-a931-940308560ef8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:27:14][352600229507091][4087 ms][DEBUG] proc_open done in 3701 ms; code=255; res.len=3343 [2025-08-25 20:27:14][352600229507091][4087 ms][DEBUG] END runCmdUntilRes#1 in 3701 ms [2025-08-25 20:27:14][352600229507091][4087 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:33:04][359976520104926][1 ms][INFO] === Request start === [2025-08-25 20:33:04][359976520104926][1 ms][DEBUG] START check_scloud [2025-08-25 20:33:04][359976520104926][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:33:05][359976520104926][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 535 13469 24768764 230288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:33:05][359976520104926][246 ms][DEBUG] targetPkg: running [2025-08-25 20:33:05][359976520104926][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-25 20:33:05][359976520104926][246 ms][DEBUG] START check_boot_completed [2025-08-25 20:33:05][359976520104926][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:33:05][359976520104926][276 ms][DEBUG] ADB: done in 30 ms; out [2025-08-25 20:33:05][359976520104926][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:33:05][359976520104926][323 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:33:05][359976520104926][323 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-25 20:33:05][359976520104926][323 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:33:05][359976520104926][323 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359976520104926\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8230\"}'\'' -e'"" [2025-08-25 20:33:05][359976520104926][323 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:33:05][359976520104926][323 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359976520104926\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8230\"}'\'' -e'"" [2025-08-25 20:33:10][359976520104926][5400 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_829d2606-bbac-461c-8234-82bdc50dc4f5","id":"QR_829d2606-bbac-461c-8234-82bdc50dc4f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:33:10][359976520104926][5556 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-08-25 20:33:10][359976520104926][5557 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-08-25 20:33:10][359976520104926][5557 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:33:16][350408224477530][0 ms][INFO] === Request start === [2025-08-25 20:33:16][350408224477530][1 ms][DEBUG] START check_scloud [2025-08-25 20:33:16][350408224477530][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:33:16][350408224477530][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 535 13469 24931848 241040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:33:16][350408224477530][254 ms][DEBUG] targetPkg: running [2025-08-25 20:33:16][350408224477530][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-25 20:33:16][350408224477530][254 ms][DEBUG] START check_boot_completed [2025-08-25 20:33:16][350408224477530][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:33:16][350408224477530][301 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:33:16][350408224477530][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:33:16][350408224477530][394 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 20:33:16][350408224477530][395 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-25 20:33:16][350408224477530][395 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:33:16][350408224477530][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224477530\",\"model\":\"SM-F936W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7005\"}'\'' -e'"" [2025-08-25 20:33:16][350408224477530][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:33:16][350408224477530][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224477530\",\"model\":\"SM-F936W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7005\"}'\'' -e'"" [2025-08-25 20:33:25][350408224477530][8642 ms][DEBUG] proc_open done in 8248 ms (timeout); code=4; out.len=0 err.len=89 [2025-08-25 20:33:25][350408224477530][8642 ms][DEBUG] END runCmdUntilRes#1 in 8248 ms [2025-08-25 20:33:25][350408224477530][8642 ms][WARN] Detected error: Process with pid 535 either refused to load frida-agent, or terminated during injection [2025-08-25 20:33:25][350408224477530][8642 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 20:33:25][350408224477530][8830 ms][DEBUG] SU: done in 187 ms; out [2025-08-25 20:33:25][350408224477530][8830 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 20:33:25][350408224477530][8830 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 20:33:25][350408224477530][9095 ms][DEBUG] SU: done in 265 ms; out [2025-08-25 20:33:25][350408224477530][9096 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 20:33:25][350408224477530][9345 ms][DEBUG] SU: done in 250 ms; out [2025-08-25 20:33:27][350408224477530][11360 ms][DEBUG] START check_boot_completed [2025-08-25 20:33:27][350408224477530][11360 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:33:27][350408224477530][11407 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:33:27][350408224477530][11408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:33:28][350408224477530][11501 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 20:33:28][350408224477530][11501 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 20:33:31][350408224477530][14516 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 20:33:31][350408224477530][14516 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224477530\",\"model\":\"SM-F936W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7005\"}'\'' -e'"" [2025-08-25 20:33:32][350408224477530][16001 ms][DEBUG] proc_open done in 1485 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-25 20:33:32][350408224477530][16001 ms][DEBUG] END runCmdUntilRes#2 in 1485 ms [2025-08-25 20:33:32][350408224477530][16001 ms][WARN] Detected error 2; Reboot the device [2025-08-25 20:33:32][350408224477530][16001 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-25 20:33:33][350408224477530][16593 ms][DEBUG] SU: done in 593 ms; out [2025-08-25 20:34:04][350408224477530][0 ms][INFO] === Request start === [2025-08-25 20:34:04][350408224477530][1 ms][DEBUG] START check_scloud [2025-08-25 20:34:04][350408224477530][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:34:04][350408224477530][47 ms][DEBUG] SU: done in 46 ms; out [2025-08-25 20:34:04][350408224477530][47 ms][WARN] targetPkg: not running, restarting [2025-08-25 20:34:04][350408224477530][47 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 20:34:04][350408224477530][78 ms][DEBUG] SU: done in 31 ms; out [2025-08-25 20:34:04][350408224477530][78 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 20:34:04][350408224477530][125 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:34:06][350408224477530][2140 ms][DEBUG] END check_scloud in 2139 ms [2025-08-25 20:34:06][350408224477530][2140 ms][DEBUG] START check_boot_completed [2025-08-25 20:34:06][350408224477530][2140 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:34:32][350408224477530][28578 ms][DEBUG] ADB: done in 26438 ms; out [2025-08-25 20:34:32][350408224477530][28578 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:34:33][350408224477530][28703 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 20:34:33][350408224477530][28703 ms][DEBUG] END check_boot_completed in 26563 ms [2025-08-25 20:34:33][350408224477530][28703 ms][DEBUG] START check_internet [2025-08-25 20:34:33][350408224477530][28704 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:34:33][350408224477530][28875 ms][DEBUG] SU: done in 171 ms; out [2025-08-25 20:34:33][350408224477530][28875 ms][WARN] check_internet: offline [2025-08-25 20:34:33][350408224477530][28875 ms][DEBUG] END check_internet in 172 ms [2025-08-25 20:35:05][350408224477530][1 ms][INFO] === Request start === [2025-08-25 20:35:05][350408224477530][1 ms][DEBUG] START check_scloud [2025-08-25 20:35:05][350408224477530][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:35:05][350408224477530][336 ms][DEBUG] SU: done in 335 ms; out [2025-08-25 20:35:05][350408224477530][336 ms][WARN] targetPkg: not running, restarting [2025-08-25 20:35:05][350408224477530][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 20:35:05][350408224477530][476 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 20:35:05][350408224477530][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 20:35:05][350408224477530][664 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 20:35:07][350408224477530][2679 ms][DEBUG] END check_scloud in 2678 ms [2025-08-25 20:35:07][350408224477530][2679 ms][DEBUG] START check_boot_completed [2025-08-25 20:35:07][350408224477530][2679 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:35:07][350408224477530][2726 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:35:07][350408224477530][2726 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:35:07][350408224477530][2804 ms][DEBUG] SU: done in 78 ms; out [2025-08-25 20:35:07][350408224477530][2804 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-25 20:35:07][350408224477530][2804 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:35:07][350408224477530][2804 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224477530\",\"model\":\"SM-F936W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6434\"}'\'' -e'"" [2025-08-25 20:35:07][350408224477530][2804 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:35:07][350408224477530][2804 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350408224477530\",\"model\":\"SM-F936W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6434\"}'\'' -e'"" [2025-08-25 20:35:14][350408224477530][9333 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81c5ff98-4c88-4eb3-875a-c992a3ac0062","id":"QR_81c5ff98-4c88-4eb3-875a-c992a3ac0062","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:35:14][350408224477530][9490 ms][DEBUG] proc_open done in 6685 ms; code=255; res.len=3343 [2025-08-25 20:35:14][350408224477530][9490 ms][DEBUG] END runCmdUntilRes#1 in 6685 ms [2025-08-25 20:35:14][350408224477530][9490 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:37:04][352364855028738][0 ms][INFO] === Request start === [2025-08-25 20:37:04][352364855028738][1 ms][DEBUG] START check_scloud [2025-08-25 20:37:04][352364855028738][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:37:04][352364855028738][374 ms][DEBUG] SU: done in 374 ms; outu0_a118 11176 4974 23517428 67200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:37:04][352364855028738][374 ms][DEBUG] targetPkg: running [2025-08-25 20:37:04][352364855028738][374 ms][DEBUG] END check_scloud in 374 ms [2025-08-25 20:37:04][352364855028738][374 ms][DEBUG] START check_boot_completed [2025-08-25 20:37:04][352364855028738][374 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:37:04][352364855028738][406 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 20:37:04][352364855028738][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:37:04][352364855028738][452 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:37:04][352364855028738][452 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 20:37:04][352364855028738][452 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:37:04][352364855028738][453 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352364855028738\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4089\"}'\'' -e'"" [2025-08-25 20:37:04][352364855028738][453 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:37:04][352364855028738][453 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352364855028738\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4089\"}'\'' -e'"" [2025-08-25 20:37:10][352364855028738][6029 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cba822d5-bd03-4fcd-b967-a248bbff8e39","id":"QR_cba822d5-bd03-4fcd-b967-a248bbff8e39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:37:10][352364855028738][6185 ms][DEBUG] proc_open done in 5733 ms; code=255; res.len=3343 [2025-08-25 20:37:10][352364855028738][6185 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-08-25 20:37:10][352364855028738][6186 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:42:04][351272333819589][1 ms][INFO] === Request start === [2025-08-25 20:42:04][351272333819589][1 ms][DEBUG] START check_scloud [2025-08-25 20:42:04][351272333819589][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:42:04][351272333819589][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 11176 4974 23609548 88696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:42:04][351272333819589][284 ms][DEBUG] targetPkg: running [2025-08-25 20:42:04][351272333819589][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-25 20:42:04][351272333819589][284 ms][DEBUG] START check_boot_completed [2025-08-25 20:42:04][351272333819589][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:42:04][351272333819589][316 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 20:42:04][351272333819589][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:42:04][351272333819589][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:42:04][351272333819589][363 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 20:42:04][351272333819589][363 ms][DEBUG] START check_internet [2025-08-25 20:42:04][351272333819589][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:42:05][351272333819589][785 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.736/200.736/200.736/0.000 ms\n [2025-08-25 20:42:05][351272333819589][785 ms][DEBUG] check_internet: online [2025-08-25 20:42:05][351272333819589][785 ms][DEBUG] END check_internet in 422 ms [2025-08-25 20:42:05][351272333819589][785 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:42:05][351272333819589][785 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333819589\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4180\"}'\'' -e'"" [2025-08-25 20:42:05][351272333819589][785 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:42:05][351272333819589][785 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333819589\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4180\"}'\'' -e'"" [2025-08-25 20:42:08][351272333819589][4518 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0116a33-4d04-4f00-a36e-723ce2051bc1","id":"QR_c0116a33-4d04-4f00-a36e-723ce2051bc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:42:08][351272333819589][4674 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-25 20:42:08][351272333819589][4674 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-25 20:42:08][351272333819589][4674 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:43:03][353182205787988][1 ms][INFO] === Request start === [2025-08-25 20:43:03][353182205787988][1 ms][DEBUG] START check_scloud [2025-08-25 20:43:03][353182205787988][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:43:04][353182205787988][252 ms][DEBUG] SU: done in 250 ms; outu0_a118 11176 4974 23755952 100308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:43:04][353182205787988][252 ms][DEBUG] targetPkg: running [2025-08-25 20:43:04][353182205787988][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-25 20:43:04][353182205787988][252 ms][DEBUG] START check_boot_completed [2025-08-25 20:43:04][353182205787988][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:43:04][353182205787988][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:43:04][353182205787988][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:43:04][353182205787988][361 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 20:43:04][353182205787988][361 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 20:43:04][353182205787988][361 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:43:04][353182205787988][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182205787988\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9833\"}'\'' -e'"" [2025-08-25 20:43:04][353182205787988][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:43:04][353182205787988][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182205787988\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9833\"}'\'' -e'"" [2025-08-25 20:43:08][353182205787988][4235 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0059870e-b278-4f42-9f92-c7967e70814a","id":"QR_0059870e-b278-4f42-9f92-c7967e70814a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:43:08][353182205787988][4391 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-25 20:43:08][353182205787988][4391 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-25 20:43:08][353182205787988][4391 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:44:02][357967972992423][0 ms][INFO] === Request start === [2025-08-25 20:44:02][357967972992423][1 ms][DEBUG] START check_scloud [2025-08-25 20:44:02][357967972992423][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:44:02][357967972992423][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 11176 4974 23890132 111380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:44:02][357967972992423][252 ms][DEBUG] targetPkg: running [2025-08-25 20:44:02][357967972992423][252 ms][DEBUG] END check_scloud in 252 ms [2025-08-25 20:44:02][357967972992423][252 ms][DEBUG] START check_boot_completed [2025-08-25 20:44:02][357967972992423][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:44:02][357967972992423][299 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:44:02][357967972992423][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:44:03][357967972992423][361 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 20:44:03][357967972992423][361 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 20:44:03][357967972992423][361 ms][DEBUG] START check_internet [2025-08-25 20:44:03][357967972992423][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:44:03][357967972992423][689 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.149/221.149/221.149/0.000 ms\n [2025-08-25 20:44:03][357967972992423][690 ms][DEBUG] check_internet: online [2025-08-25 20:44:03][357967972992423][690 ms][DEBUG] END check_internet in 328 ms [2025-08-25 20:44:03][357967972992423][690 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:44:03][357967972992423][690 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972992423\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6562\"}'\'' -e'"" [2025-08-25 20:44:03][357967972992423][690 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:44:03][357967972992423][690 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972992423\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6562\"}'\'' -e'"" [2025-08-25 20:44:07][357967972992423][4407 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9860fcb3-2acc-4e80-b32e-a821cc092334","id":"QR_9860fcb3-2acc-4e80-b32e-a821cc092334","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:44:07][357967972992423][4563 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-25 20:44:07][357967972992423][4563 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-25 20:44:07][357967972992423][4563 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:47:02][352743953621025][1 ms][INFO] === Request start === [2025-08-25 20:47:02][352743953621025][1 ms][DEBUG] START check_scloud [2025-08-25 20:47:02][352743953621025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:47:02][352743953621025][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 11176 4974 24005880 122596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:47:02][352743953621025][304 ms][DEBUG] targetPkg: running [2025-08-25 20:47:02][352743953621025][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 20:47:02][352743953621025][305 ms][DEBUG] START check_boot_completed [2025-08-25 20:47:02][352743953621025][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:47:02][352743953621025][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:47:02][352743953621025][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:47:02][352743953621025][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:47:02][352743953621025][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 20:47:02][352743953621025][398 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:47:02][352743953621025][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743953621025\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5835\"}'\'' -e'"" [2025-08-25 20:47:02][352743953621025][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:47:02][352743953621025][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743953621025\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5835\"}'\'' -e'"" [2025-08-25 20:47:07][352743953621025][4663 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24f72c3b-ee9e-49f2-ac59-164c2a22b548","id":"QR_24f72c3b-ee9e-49f2-ac59-164c2a22b548","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:47:07][352743953621025][4819 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3343 [2025-08-25 20:47:07][352743953621025][4819 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-08-25 20:47:07][352743953621025][4819 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:48:02][352731456969579][0 ms][INFO] === Request start === [2025-08-25 20:48:02][352731456969579][1 ms][DEBUG] START check_scloud [2025-08-25 20:48:02][352731456969579][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:48:03][352731456969579][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 11176 4974 24162140 134660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:48:03][352731456969579][299 ms][DEBUG] targetPkg: running [2025-08-25 20:48:03][352731456969579][299 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 20:48:03][352731456969579][299 ms][DEBUG] START check_boot_completed [2025-08-25 20:48:03][352731456969579][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:48:03][352731456969579][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:48:03][352731456969579][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:48:03][352731456969579][409 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 20:48:03][352731456969579][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 20:48:03][352731456969579][409 ms][DEBUG] START check_internet [2025-08-25 20:48:03][352731456969579][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:48:03][352731456969579][799 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.225/202.225/202.225/0.000 ms\n [2025-08-25 20:48:03][352731456969579][799 ms][DEBUG] check_internet: online [2025-08-25 20:48:03][352731456969579][799 ms][DEBUG] END check_internet in 391 ms [2025-08-25 20:48:03][352731456969579][799 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:48:03][352731456969579][799 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731456969579\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1657\"}'\'' -e'"" [2025-08-25 20:48:03][352731456969579][800 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:48:03][352731456969579][800 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731456969579\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1657\"}'\'' -e'"" [2025-08-25 20:48:07][352731456969579][4486 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_95aac92f-010c-4923-8d71-91599e7302ad","id":"QR_95aac92f-010c-4923-8d71-91599e7302ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:48:07][352731456969579][4642 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-25 20:48:07][352731456969579][4642 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-25 20:48:07][352731456969579][4642 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:49:02][352698475178633][0 ms][INFO] === Request start === [2025-08-25 20:49:02][352698475178633][1 ms][DEBUG] START check_scloud [2025-08-25 20:49:02][352698475178633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:49:03][352698475178633][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 11176 4974 24313920 145676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:49:03][352698475178633][306 ms][DEBUG] targetPkg: running [2025-08-25 20:49:03][352698475178633][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 20:49:03][352698475178633][306 ms][DEBUG] START check_boot_completed [2025-08-25 20:49:03][352698475178633][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:49:03][352698475178633][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:49:03][352698475178633][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:49:03][352698475178633][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 20:49:03][352698475178633][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 20:49:03][352698475178633][415 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:49:03][352698475178633][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698475178633\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1558\"}'\'' -e'"" [2025-08-25 20:49:03][352698475178633][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:49:03][352698475178633][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698475178633\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1558\"}'\'' -e'"" [2025-08-25 20:49:07][352698475178633][4195 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_759043a4-b1f5-45c2-9149-b0c4eada0aa7","id":"QR_759043a4-b1f5-45c2-9149-b0c4eada0aa7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:49:07][352698475178633][4351 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-25 20:49:07][352698475178633][4351 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-25 20:49:07][352698475178633][4351 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:49:09][350296215104621][1 ms][INFO] === Request start === [2025-08-25 20:49:09][350296215104621][1 ms][DEBUG] START check_scloud [2025-08-25 20:49:09][350296215104621][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:49:09][350296215104621][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 11176 4974 24464712 157484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:49:09][350296215104621][277 ms][DEBUG] targetPkg: running [2025-08-25 20:49:09][350296215104621][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-25 20:49:09][350296215104621][277 ms][DEBUG] START check_boot_completed [2025-08-25 20:49:09][350296215104621][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:49:10][350296215104621][322 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 20:49:10][350296215104621][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:49:10][350296215104621][385 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 20:49:10][350296215104621][385 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 20:49:10][350296215104621][385 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:49:10][350296215104621][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350296215104621\",\"model\":\"SM-S906U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7532\"}'\'' -e'"" [2025-08-25 20:49:10][350296215104621][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:49:10][350296215104621][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350296215104621\",\"model\":\"SM-S906U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7532\"}'\'' -e'"" [2025-08-25 20:49:15][350296215104621][5399 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e1c57fa-ea61-452e-a703-5e76b724ad9c","id":"QR_7e1c57fa-ea61-452e-a703-5e76b724ad9c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:49:15][350296215104621][5556 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-08-25 20:49:15][350296215104621][5556 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-08-25 20:49:15][350296215104621][5556 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:49:19][353154433615711][0 ms][INFO] === Request start === [2025-08-25 20:49:19][353154433615711][1 ms][DEBUG] START check_scloud [2025-08-25 20:49:19][353154433615711][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:49:19][353154433615711][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 11176 4974 24584784 163452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:49:19][353154433615711][314 ms][DEBUG] targetPkg: running [2025-08-25 20:49:19][353154433615711][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 20:49:19][353154433615711][314 ms][DEBUG] START check_boot_completed [2025-08-25 20:49:19][353154433615711][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:49:19][353154433615711][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 20:49:19][353154433615711][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:49:19][353154433615711][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:49:19][353154433615711][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 20:49:19][353154433615711][392 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:49:19][353154433615711][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433615711\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3159\"}'\'' -e'"" [2025-08-25 20:49:19][353154433615711][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:49:19][353154433615711][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433615711\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3159\"}'\'' -e'"" [2025-08-25 20:49:22][353154433615711][3595 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 20:49:23][353154433615711][3751 ms][DEBUG] proc_open done in 3358 ms; code=255; res.len=107 [2025-08-25 20:49:23][353154433615711][3751 ms][DEBUG] END runCmdUntilRes#1 in 3358 ms [2025-08-25 20:49:23][353154433615711][3751 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 20:49:23][][0 ms][INFO] === Request start === [2025-08-25 20:49:23][][1 ms][DEBUG] START check_scloud [2025-08-25 20:49:23][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:49:23][][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 11176 4974 24749684 175436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:49:23][][304 ms][DEBUG] targetPkg: running [2025-08-25 20:49:23][][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 20:49:23][][305 ms][DEBUG] START check_boot_completed [2025-08-25 20:49:23][][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:49:23][][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:49:23][][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:49:23][][414 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 20:49:23][][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 20:49:23][][414 ms][DEBUG] rawBody.length=1129 [2025-08-25 20:49:23][][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXC0SKJ6T\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2795\"}'\'' -e'"" [2025-08-25 20:49:23][][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:49:23][][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXC0SKJ6T\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2795\"}'\'' -e'"" [2025-08-25 20:49:27][][3710 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 20:49:27][][3866 ms][DEBUG] proc_open done in 3451 ms; code=255; res.len=107 [2025-08-25 20:49:27][][3866 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-08-25 20:49:27][][3866 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 20:49:27][351978523224741][0 ms][INFO] === Request start === [2025-08-25 20:49:27][351978523224741][1 ms][DEBUG] START check_scloud [2025-08-25 20:49:27][351978523224741][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:49:28][351978523224741][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 11176 4974 24927104 187396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:49:28][351978523224741][264 ms][DEBUG] targetPkg: running [2025-08-25 20:49:28][351978523224741][264 ms][DEBUG] END check_scloud in 264 ms [2025-08-25 20:49:28][351978523224741][264 ms][DEBUG] START check_boot_completed [2025-08-25 20:49:28][351978523224741][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:49:28][351978523224741][311 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:49:28][351978523224741][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:49:28][351978523224741][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:49:28][351978523224741][358 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 20:49:28][351978523224741][358 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:49:28][351978523224741][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523224741\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6326\"}'\'' -e'"" [2025-08-25 20:49:28][351978523224741][358 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:49:28][351978523224741][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523224741\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6326\"}'\'' -e'"" [2025-08-25 20:49:32][351978523224741][4701 ms][DEBUG] proc_open done in 4342 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 20:49:32][351978523224741][4701 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-25 20:49:32][351978523224741][4701 ms][WARN] Detected error: Process with pid 11176 either refused to load frida-agent, or terminated during injection [2025-08-25 20:49:32][351978523224741][4701 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 20:49:32][351978523224741][4857 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 20:49:32][351978523224741][4857 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 20:49:32][351978523224741][4857 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 20:49:32][351978523224741][5013 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 20:49:32][351978523224741][5013 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 20:49:33][351978523224741][5185 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 20:49:35][351978523224741][7200 ms][DEBUG] START check_boot_completed [2025-08-25 20:49:35][351978523224741][7200 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:49:35][351978523224741][7247 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:49:35][351978523224741][7247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:49:35][351978523224741][7309 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 20:49:35][351978523224741][7309 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 20:49:38][351978523224741][10324 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 20:49:38][351978523224741][10324 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523224741\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6326\"}'\'' -e'"" [2025-08-25 20:49:42][351978523224741][14198 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c838f425-bba0-44c0-9233-25e5565ea905","id":"QR_c838f425-bba0-44c0-9233-25e5565ea905","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:49:42][351978523224741][14354 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-25 20:49:42][351978523224741][14354 ms][DEBUG] END runCmdUntilRes#2 in 4030 ms [2025-08-25 20:49:42][351978523224741][14354 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:50:05][350496872472556][0 ms][INFO] === Request start === [2025-08-25 20:50:05][350496872472556][1 ms][DEBUG] START check_scloud [2025-08-25 20:50:05][350496872472556][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:50:05][350496872472556][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 18258 4974 23512172 126848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:50:05][350496872472556][317 ms][DEBUG] targetPkg: running [2025-08-25 20:50:05][350496872472556][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 20:50:05][350496872472556][317 ms][DEBUG] START check_boot_completed [2025-08-25 20:50:05][350496872472556][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:50:05][350496872472556][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:50:05][350496872472556][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:50:05][350496872472556][413 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 20:50:05][350496872472556][413 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-25 20:50:05][350496872472556][413 ms][DEBUG] START check_internet [2025-08-25 20:50:05][350496872472556][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:50:06][350496872472556][755 ms][DEBUG] SU: done in 341 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.373/191.373/191.373/0.000 ms\n [2025-08-25 20:50:06][350496872472556][755 ms][DEBUG] check_internet: online [2025-08-25 20:50:06][350496872472556][755 ms][DEBUG] END check_internet in 342 ms [2025-08-25 20:50:06][350496872472556][755 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:50:06][350496872472556][755 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350496872472556\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4897\"}'\'' -e'"" [2025-08-25 20:50:06][350496872472556][755 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:50:06][350496872472556][755 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350496872472556\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4897\"}'\'' -e'"" [2025-08-25 20:50:11][350496872472556][5597 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3870fd66-9eb4-4f6b-b3f4-e8254ce8a02e","id":"QR_3870fd66-9eb4-4f6b-b3f4-e8254ce8a02e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:50:11][350496872472556][5753 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-25 20:50:11][350496872472556][5753 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-25 20:50:11][350496872472556][5753 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:50:16][350603386666447][0 ms][INFO] === Request start === [2025-08-25 20:50:16][350603386666447][1 ms][DEBUG] START check_scloud [2025-08-25 20:50:16][350603386666447][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:50:16][350603386666447][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18258 4974 23682420 137880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:50:16][350603386666447][307 ms][DEBUG] targetPkg: running [2025-08-25 20:50:16][350603386666447][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-25 20:50:16][350603386666447][308 ms][DEBUG] START check_boot_completed [2025-08-25 20:50:16][350603386666447][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:50:16][350603386666447][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:50:16][350603386666447][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:50:16][350603386666447][402 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 20:50:16][350603386666447][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 20:50:16][350603386666447][402 ms][DEBUG] START check_internet [2025-08-25 20:50:16][350603386666447][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:50:17][350603386666447][729 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=177 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 177.046/177.046/177.046/0.000 ms\n [2025-08-25 20:50:17][350603386666447][729 ms][DEBUG] check_internet: online [2025-08-25 20:50:17][350603386666447][729 ms][DEBUG] END check_internet in 327 ms [2025-08-25 20:50:17][350603386666447][729 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:50:17][350603386666447][729 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603386666447\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2887\"}'\'' -e'"" [2025-08-25 20:50:17][350603386666447][729 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:50:17][350603386666447][729 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603386666447\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2887\"}'\'' -e'"" [2025-08-25 20:50:21][350603386666447][5571 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bdfe29c0-da3a-4d8b-9ce5-f8874feef9d7","id":"QR_bdfe29c0-da3a-4d8b-9ce5-f8874feef9d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:50:22][350603386666447][5728 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-25 20:50:22][350603386666447][5728 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-25 20:50:22][350603386666447][5728 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:50:25][352698477212810][0 ms][INFO] === Request start === [2025-08-25 20:50:25][352698477212810][1 ms][DEBUG] START check_scloud [2025-08-25 20:50:25][352698477212810][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:50:26][352698477212810][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 18258 4974 23835196 150412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:50:26][352698477212810][287 ms][DEBUG] targetPkg: running [2025-08-25 20:50:26][352698477212810][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-25 20:50:26][352698477212810][288 ms][DEBUG] START check_boot_completed [2025-08-25 20:50:26][352698477212810][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:50:26][352698477212810][333 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:50:26][352698477212810][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:50:26][352698477212810][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:50:26][352698477212810][380 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 20:50:26][352698477212810][380 ms][DEBUG] START check_internet [2025-08-25 20:50:26][352698477212810][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:50:26][352698477212810][661 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.308/164.308/164.308/0.000 ms\n [2025-08-25 20:50:26][352698477212810][662 ms][DEBUG] check_internet: online [2025-08-25 20:50:26][352698477212810][662 ms][DEBUG] END check_internet in 281 ms [2025-08-25 20:50:26][352698477212810][662 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:50:26][352698477212810][662 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698477212810\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8661\"}'\'' -e'"" [2025-08-25 20:50:26][352698477212810][662 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:50:26][352698477212810][662 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698477212810\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8661\"}'\'' -e'"" [2025-08-25 20:50:29][352698477212810][4129 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 20:50:30][352698477212810][4285 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=107 [2025-08-25 20:50:30][352698477212810][4286 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-25 20:50:30][352698477212810][4286 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 20:50:30][][0 ms][INFO] === Request start === [2025-08-25 20:50:30][][1 ms][DEBUG] START check_scloud [2025-08-25 20:50:30][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:50:30][][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 18258 4974 23959264 161348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:50:30][][322 ms][DEBUG] targetPkg: running [2025-08-25 20:50:30][][322 ms][DEBUG] END check_scloud in 322 ms [2025-08-25 20:50:30][][322 ms][DEBUG] START check_boot_completed [2025-08-25 20:50:30][][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:50:30][][353 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 20:50:30][][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:50:30][][416 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 20:50:30][][416 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 20:50:30][][416 ms][DEBUG] START check_internet [2025-08-25 20:50:30][][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:50:31][][666 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=116 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 116.366/116.366/116.366/0.000 ms\n [2025-08-25 20:50:31][][666 ms][DEBUG] check_internet: online [2025-08-25 20:50:31][][666 ms][DEBUG] END check_internet in 250 ms [2025-08-25 20:50:31][][666 ms][DEBUG] rawBody.length=1129 [2025-08-25 20:50:31][][666 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCWA2E3LQL\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7017\"}'\'' -e'"" [2025-08-25 20:50:31][][666 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:50:31][][667 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCWA2E3LQL\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7017\"}'\'' -e'"" [2025-08-25 20:50:34][][4025 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 20:50:34][][4181 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=107 [2025-08-25 20:50:34][][4181 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-08-25 20:50:34][][4181 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 20:51:02][353520959245432][0 ms][INFO] === Request start === [2025-08-25 20:51:02][353520959245432][1 ms][DEBUG] START check_scloud [2025-08-25 20:51:02][353520959245432][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:51:02][353520959245432][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 18258 4974 24048508 172748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:51:02][353520959245432][286 ms][DEBUG] targetPkg: running [2025-08-25 20:51:02][353520959245432][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-25 20:51:02][353520959245432][286 ms][DEBUG] START check_boot_completed [2025-08-25 20:51:02][353520959245432][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:51:02][353520959245432][332 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:51:02][353520959245432][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:51:02][353520959245432][395 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 20:51:02][353520959245432][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 20:51:02][353520959245432][395 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:51:02][353520959245432][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520959245432\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2282\"}'\'' -e'"" [2025-08-25 20:51:02][353520959245432][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:51:02][353520959245432][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520959245432\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2282\"}'\'' -e'"" [2025-08-25 20:51:06][353520959245432][4175 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0080ffbf-3976-4e4d-a6e0-ce1bae92ce20","id":"QR_0080ffbf-3976-4e4d-a6e0-ce1bae92ce20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:51:06][353520959245432][4331 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-25 20:51:06][353520959245432][4331 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-25 20:51:06][353520959245432][4331 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:52:02][350513040639906][1 ms][INFO] === Request start === [2025-08-25 20:52:02][350513040639906][1 ms][DEBUG] START check_scloud [2025-08-25 20:52:02][350513040639906][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:52:03][350513040639906][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 18258 4974 24162444 183916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:52:03][350513040639906][302 ms][DEBUG] targetPkg: running [2025-08-25 20:52:03][350513040639906][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 20:52:03][350513040639906][302 ms][DEBUG] START check_boot_completed [2025-08-25 20:52:03][350513040639906][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:52:03][350513040639906][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:52:03][350513040639906][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:52:03][350513040639906][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:52:03][350513040639906][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 20:52:03][350513040639906][395 ms][DEBUG] START check_internet [2025-08-25 20:52:03][350513040639906][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:52:03][350513040639906][833 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.375/201.375/201.375/0.000 ms\n [2025-08-25 20:52:03][350513040639906][833 ms][DEBUG] check_internet: online [2025-08-25 20:52:03][350513040639906][833 ms][DEBUG] END check_internet in 438 ms [2025-08-25 20:52:03][350513040639906][833 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:52:03][350513040639906][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350513040639906\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9930\"}'\'' -e'"" [2025-08-25 20:52:03][350513040639906][834 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:52:03][350513040639906][834 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350513040639906\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9930\"}'\'' -e'"" [2025-08-25 20:52:07][350513040639906][4925 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6fc7751-b9ef-4f6e-b76f-aa249e8d50e6","id":"QR_d6fc7751-b9ef-4f6e-b76f-aa249e8d50e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:52:07][350513040639906][5082 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-25 20:52:07][350513040639906][5082 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-25 20:52:07][350513040639906][5082 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:53:02][354705112697871][0 ms][INFO] === Request start === [2025-08-25 20:53:02][354705112697871][1 ms][DEBUG] START check_scloud [2025-08-25 20:53:02][354705112697871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:53:02][354705112697871][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 18258 4974 24294640 195492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:53:02][354705112697871][310 ms][DEBUG] targetPkg: running [2025-08-25 20:53:02][354705112697871][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 20:53:02][354705112697871][310 ms][DEBUG] START check_boot_completed [2025-08-25 20:53:02][354705112697871][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:53:02][354705112697871][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:53:02][354705112697871][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:53:02][354705112697871][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:53:02][354705112697871][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 20:53:02][354705112697871][404 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:53:02][354705112697871][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354705112697871\",\"model\":\"SM-A716S\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4348\"}'\'' -e'"" [2025-08-25 20:53:02][354705112697871][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:53:02][354705112697871][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354705112697871\",\"model\":\"SM-A716S\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4348\"}'\'' -e'"" [2025-08-25 20:53:05][354705112697871][3887 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a37f5d22-09df-46d8-bb21-f4286c3900d0","id":"QR_a37f5d22-09df-46d8-bb21-f4286c3900d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:53:06][354705112697871][4043 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-08-25 20:53:06][354705112697871][4043 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-25 20:53:06][354705112697871][4043 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:54:05][359797458634811][1 ms][INFO] === Request start === [2025-08-25 20:54:05][359797458634811][1 ms][DEBUG] START check_scloud [2025-08-25 20:54:05][359797458634811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:54:05][359797458634811][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 18258 4974 24428820 206520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:54:05][359797458634811][313 ms][DEBUG] targetPkg: running [2025-08-25 20:54:05][359797458634811][313 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 20:54:05][359797458634811][313 ms][DEBUG] START check_boot_completed [2025-08-25 20:54:05][359797458634811][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:54:05][359797458634811][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 20:54:05][359797458634811][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:54:05][359797458634811][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:54:05][359797458634811][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 20:54:05][359797458634811][406 ms][DEBUG] START check_internet [2025-08-25 20:54:05][359797458634811][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:54:05][359797458634811][656 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.508/146.508/146.508/0.000 ms\n [2025-08-25 20:54:05][359797458634811][656 ms][DEBUG] check_internet: online [2025-08-25 20:54:05][359797458634811][656 ms][DEBUG] END check_internet in 250 ms [2025-08-25 20:54:05][359797458634811][656 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:54:05][359797458634811][656 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797458634811\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4961\"}'\'' -e'"" [2025-08-25 20:54:05][359797458634811][656 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:54:05][359797458634811][657 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797458634811\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4961\"}'\'' -e'"" [2025-08-25 20:54:11][359797458634811][5920 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17edc62b-dc92-45b7-a0fc-743f37303618","id":"QR_17edc62b-dc92-45b7-a0fc-743f37303618","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:54:11][359797458634811][6077 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-25 20:54:11][359797458634811][6077 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-08-25 20:54:11][359797458634811][6077 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:56:04][356105119166251][1 ms][INFO] === Request start === [2025-08-25 20:56:04][356105119166251][1 ms][DEBUG] START check_scloud [2025-08-25 20:56:04][356105119166251][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:56:05][356105119166251][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 18258 4974 24575480 217552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:56:05][356105119166251][298 ms][DEBUG] targetPkg: running [2025-08-25 20:56:05][356105119166251][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-25 20:56:05][356105119166251][299 ms][DEBUG] START check_boot_completed [2025-08-25 20:56:05][356105119166251][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:56:05][356105119166251][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 20:56:05][356105119166251][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:56:05][356105119166251][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:56:05][356105119166251][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 20:56:05][356105119166251][377 ms][DEBUG] START check_internet [2025-08-25 20:56:05][356105119166251][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:56:05][356105119166251][752 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.174/202.174/202.174/0.000 ms\n [2025-08-25 20:56:05][356105119166251][752 ms][DEBUG] check_internet: online [2025-08-25 20:56:05][356105119166251][752 ms][DEBUG] END check_internet in 375 ms [2025-08-25 20:56:05][356105119166251][752 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:56:05][356105119166251][752 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356105119166251\",\"model\":\"SM-N986W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7413\"}'\'' -e'"" [2025-08-25 20:56:05][356105119166251][752 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:56:05][356105119166251][752 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356105119166251\",\"model\":\"SM-N986W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7413\"}'\'' -e'"" [2025-08-25 20:56:10][356105119166251][5391 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3086bbf-c525-4074-b825-1dece12bed92","id":"QR_e3086bbf-c525-4074-b825-1dece12bed92","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:56:10][356105119166251][5547 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-25 20:56:10][356105119166251][5547 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-25 20:56:10][356105119166251][5547 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:57:02][357967976124544][0 ms][INFO] === Request start === [2025-08-25 20:57:02][357967976124544][1 ms][DEBUG] START check_scloud [2025-08-25 20:57:02][357967976124544][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:57:03][357967976124544][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 18258 4974 24689052 229080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:57:03][357967976124544][289 ms][DEBUG] targetPkg: running [2025-08-25 20:57:03][357967976124544][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-25 20:57:03][357967976124544][289 ms][DEBUG] START check_boot_completed [2025-08-25 20:57:03][357967976124544][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:57:03][357967976124544][320 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 20:57:03][357967976124544][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:57:03][357967976124544][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:57:03][357967976124544][367 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 20:57:03][357967976124544][367 ms][DEBUG] rawBody.length=1148 [2025-08-25 20:57:03][357967976124544][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976124544\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4594\"}'\'' -e'"" [2025-08-25 20:57:03][357967976124544][367 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:57:03][357967976124544][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976124544\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4594\"}'\'' -e'"" [2025-08-25 20:57:07][357967976124544][4959 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c82f2b01-6479-4fd1-a53a-80ffabc212b5","id":"QR_c82f2b01-6479-4fd1-a53a-80ffabc212b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:57:07][357967976124544][5116 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-08-25 20:57:07][357967976124544][5116 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-08-25 20:57:07][357967976124544][5116 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 20:58:04][356842950132824][0 ms][INFO] === Request start === [2025-08-25 20:58:04][356842950132824][1 ms][DEBUG] START check_scloud [2025-08-25 20:58:04][356842950132824][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 20:58:04][356842950132824][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 18258 4974 24817156 240956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 20:58:04][356842950132824][306 ms][DEBUG] targetPkg: running [2025-08-25 20:58:04][356842950132824][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 20:58:04][356842950132824][307 ms][DEBUG] START check_boot_completed [2025-08-25 20:58:04][356842950132824][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:58:04][356842950132824][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:58:04][356842950132824][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:58:05][356842950132824][402 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 20:58:05][356842950132824][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 20:58:05][356842950132824][402 ms][DEBUG] START check_internet [2025-08-25 20:58:05][356842950132824][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 20:58:05][356842950132824][697 ms][DEBUG] SU: done in 295 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=177 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 177.240/177.240/177.240/0.000 ms\n [2025-08-25 20:58:05][356842950132824][697 ms][DEBUG] check_internet: online [2025-08-25 20:58:05][356842950132824][697 ms][DEBUG] END check_internet in 295 ms [2025-08-25 20:58:05][356842950132824][697 ms][DEBUG] rawBody.length=1149 [2025-08-25 20:58:05][356842950132824][697 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356842950132824\",\"model\":\"SM-F741B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3429\"}'\'' -e'"" [2025-08-25 20:58:05][356842950132824][697 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 20:58:05][356842950132824][697 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356842950132824\",\"model\":\"SM-F741B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3429\"}'\'' -e'"" [2025-08-25 20:58:09][356842950132824][4571 ms][DEBUG] proc_open done in 3873 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 20:58:09][356842950132824][4571 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-25 20:58:09][356842950132824][4571 ms][WARN] Detected error: Process with pid 18258 either refused to load frida-agent, or terminated during injection [2025-08-25 20:58:09][356842950132824][4571 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 20:58:09][356842950132824][4727 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 20:58:09][356842950132824][4727 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 20:58:09][356842950132824][4727 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 20:58:09][356842950132824][4852 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 20:58:09][356842950132824][4852 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 20:58:09][356842950132824][5008 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 20:58:11][356842950132824][7023 ms][DEBUG] START check_boot_completed [2025-08-25 20:58:11][356842950132824][7023 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 20:58:11][356842950132824][7070 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 20:58:11][356842950132824][7070 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 20:58:11][356842950132824][7117 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 20:58:11][356842950132824][7117 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 20:58:14][356842950132824][10132 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 20:58:14][356842950132824][10132 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356842950132824\",\"model\":\"SM-F741B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3429\"}'\'' -e'"" [2025-08-25 20:58:19][356842950132824][15053 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33f0b311-823b-4f54-8868-87e6d27a2fc4","id":"QR_33f0b311-823b-4f54-8868-87e6d27a2fc4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 20:58:19][356842950132824][15209 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-08-25 20:58:19][356842950132824][15209 ms][DEBUG] END runCmdUntilRes#2 in 5077 ms [2025-08-25 20:58:19][356842950132824][15209 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:00:03][356463671238145][1 ms][INFO] === Request start === [2025-08-25 21:00:03][356463671238145][1 ms][DEBUG] START check_scloud [2025-08-25 21:00:03][356463671238145][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:00:03][356463671238145][327 ms][DEBUG] SU: done in 325 ms; outu0_a118 19738 4974 23522124 127048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:00:03][356463671238145][327 ms][DEBUG] targetPkg: running [2025-08-25 21:00:03][356463671238145][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-25 21:00:03][356463671238145][327 ms][DEBUG] START check_boot_completed [2025-08-25 21:00:03][356463671238145][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:00:03][356463671238145][374 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:00:03][356463671238145][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:00:03][356463671238145][436 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 21:00:03][356463671238145][436 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 21:00:03][356463671238145][436 ms][DEBUG] START check_internet [2025-08-25 21:00:03][356463671238145][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 21:00:04][356463671238145][701 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=158 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 158.371/158.371/158.371/0.000 ms\n [2025-08-25 21:00:04][356463671238145][702 ms][DEBUG] check_internet: online [2025-08-25 21:00:04][356463671238145][702 ms][DEBUG] END check_internet in 266 ms [2025-08-25 21:00:04][356463671238145][702 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:00:04][356463671238145][702 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356463671238145\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6368\"}'\'' -e'"" [2025-08-25 21:00:04][356463671238145][702 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:00:04][356463671238145][702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356463671238145\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6368\"}'\'' -e'"" [2025-08-25 21:00:07][356463671238145][4497 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 21:00:08][356463671238145][4654 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=107 [2025-08-25 21:00:08][356463671238145][4654 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-25 21:00:08][356463671238145][4654 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 21:00:08][][0 ms][INFO] === Request start === [2025-08-25 21:00:08][][1 ms][DEBUG] START check_scloud [2025-08-25 21:00:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:00:08][][262 ms][DEBUG] SU: done in 262 ms; outu0_a118 19738 4974 23695252 136100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:00:08][][263 ms][DEBUG] targetPkg: running [2025-08-25 21:00:08][][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-25 21:00:08][][263 ms][DEBUG] START check_boot_completed [2025-08-25 21:00:08][][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:00:08][][294 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 21:00:08][][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:00:08][][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:00:08][][340 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 21:00:08][][341 ms][DEBUG] START check_internet [2025-08-25 21:00:08][][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 21:00:09][][559 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.624/114.624/114.624/0.000 ms\n [2025-08-25 21:00:09][][560 ms][DEBUG] check_internet: online [2025-08-25 21:00:09][][560 ms][DEBUG] END check_internet in 219 ms [2025-08-25 21:00:09][][560 ms][DEBUG] rawBody.length=1129 [2025-08-25 21:00:09][][560 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R59X4003SZV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5164\"}'\'' -e'"" [2025-08-25 21:00:09][][560 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:00:09][][560 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R59X4003SZV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5164\"}'\'' -e'"" [2025-08-25 21:00:12][][3808 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 21:00:12][][3965 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=107 [2025-08-25 21:00:12][][3965 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-08-25 21:00:12][][3965 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 21:00:15][350274357915104][0 ms][INFO] === Request start === [2025-08-25 21:00:15][350274357915104][1 ms][DEBUG] START check_scloud [2025-08-25 21:00:15][350274357915104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:00:15][350274357915104][269 ms][DEBUG] SU: done in 269 ms; outu0_a118 19738 4974 23824336 143636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:00:15][350274357915104][270 ms][DEBUG] targetPkg: running [2025-08-25 21:00:15][350274357915104][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-25 21:00:15][350274357915104][270 ms][DEBUG] START check_boot_completed [2025-08-25 21:00:15][350274357915104][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:00:15][350274357915104][316 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:00:15][350274357915104][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:00:15][350274357915104][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:00:15][350274357915104][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 21:00:15][350274357915104][363 ms][DEBUG] START check_internet [2025-08-25 21:00:15][350274357915104][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 21:00:16][350274357915104][707 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.880/227.880/227.880/0.000 ms\n [2025-08-25 21:00:16][350274357915104][707 ms][DEBUG] check_internet: online [2025-08-25 21:00:16][350274357915104][707 ms][DEBUG] END check_internet in 344 ms [2025-08-25 21:00:16][350274357915104][707 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:00:16][350274357915104][707 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274357915104\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2522\"}'\'' -e'"" [2025-08-25 21:00:16][350274357915104][707 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:00:16][350274357915104][707 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350274357915104\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2522\"}'\'' -e'"" [2025-08-25 21:00:20][350274357915104][5346 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd1247dc-70bc-474d-abc2-70b0f90dce39","id":"QR_dd1247dc-70bc-474d-abc2-70b0f90dce39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:00:20][350274357915104][5502 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-25 21:00:20][350274357915104][5502 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-25 21:00:20][350274357915104][5503 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:01:03][353170566801928][0 ms][INFO] === Request start === [2025-08-25 21:01:03][353170566801928][1 ms][DEBUG] START check_scloud [2025-08-25 21:01:03][353170566801928][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:01:04][353170566801928][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 19738 4974 23899308 155220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:01:04][353170566801928][277 ms][DEBUG] targetPkg: running [2025-08-25 21:01:04][353170566801928][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-25 21:01:04][353170566801928][277 ms][DEBUG] START check_boot_completed [2025-08-25 21:01:04][353170566801928][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:01:04][353170566801928][324 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 21:01:04][353170566801928][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:01:04][353170566801928][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:01:04][353170566801928][371 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 21:01:04][353170566801928][371 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:01:04][353170566801928][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353170566801928\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5888\"}'\'' -e'"" [2025-08-25 21:01:04][353170566801928][371 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:01:04][353170566801928][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353170566801928\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5888\"}'\'' -e'"" [2025-08-25 21:01:07][353170566801928][4057 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99cbde5e-0ced-4d22-aa59-34d2f8200312","id":"QR_99cbde5e-0ced-4d22-aa59-34d2f8200312","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:01:08][353170566801928][4213 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-25 21:01:08][353170566801928][4213 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-25 21:01:08][353170566801928][4214 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:01:09][351272330383779][0 ms][INFO] === Request start === [2025-08-25 21:01:09][351272330383779][1 ms][DEBUG] START check_scloud [2025-08-25 21:01:09][351272330383779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:01:09][351272330383779][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 19738 4974 24021300 166980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:01:09][351272330383779][260 ms][DEBUG] targetPkg: running [2025-08-25 21:01:09][351272330383779][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-25 21:01:09][351272330383779][260 ms][DEBUG] START check_boot_completed [2025-08-25 21:01:09][351272330383779][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:01:09][351272330383779][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:01:09][351272330383779][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:01:09][351272330383779][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:01:09][351272330383779][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 21:01:09][351272330383779][354 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:01:09][351272330383779][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330383779\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7081\"}'\'' -e'"" [2025-08-25 21:01:09][351272330383779][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:01:09][351272330383779][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272330383779\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7081\"}'\'' -e'"" [2025-08-25 21:01:13][351272330383779][4275 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10cf6bf8-0fb6-45e6-a366-beaf9fe01ae4","id":"QR_10cf6bf8-0fb6-45e6-a366-beaf9fe01ae4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:01:14][351272330383779][4431 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-25 21:01:14][351272330383779][4431 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-25 21:01:14][351272330383779][4431 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:01:16][355928817344289][1 ms][INFO] === Request start === [2025-08-25 21:01:16][355928817344289][1 ms][DEBUG] START check_scloud [2025-08-25 21:01:16][355928817344289][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:01:16][355928817344289][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 19738 4974 24183356 177604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:01:16][355928817344289][319 ms][DEBUG] targetPkg: running [2025-08-25 21:01:16][355928817344289][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-25 21:01:16][355928817344289][320 ms][DEBUG] START check_boot_completed [2025-08-25 21:01:16][355928817344289][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:01:16][355928817344289][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 21:01:16][355928817344289][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:01:16][355928817344289][428 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 21:01:16][355928817344289][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 21:01:16][355928817344289][429 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:01:16][355928817344289][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928817344289\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6436\"}'\'' -e'"" [2025-08-25 21:01:16][355928817344289][429 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:01:16][355928817344289][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928817344289\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6436\"}'\'' -e'"" [2025-08-25 21:01:20][355928817344289][4052 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7665946-8383-4de7-8130-7bfddfd5bbae","id":"QR_e7665946-8383-4de7-8130-7bfddfd5bbae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:01:20][355928817344289][4209 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-25 21:01:20][355928817344289][4209 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-25 21:01:20][355928817344289][4209 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:03:05][352107434643505][1 ms][INFO] === Request start === [2025-08-25 21:03:05][352107434643505][1 ms][DEBUG] START check_scloud [2025-08-25 21:03:05][352107434643505][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:03:05][352107434643505][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 19738 4974 24266456 189344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:03:05][352107434643505][297 ms][DEBUG] targetPkg: running [2025-08-25 21:03:05][352107434643505][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-25 21:03:05][352107434643505][297 ms][DEBUG] START check_boot_completed [2025-08-25 21:03:05][352107434643505][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:03:05][352107434643505][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 21:03:05][352107434643505][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:03:05][352107434643505][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:03:05][352107434643505][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 21:03:05][352107434643505][375 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:03:05][352107434643505][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352107434643505\",\"model\":\"SM-T227U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3046\"}'\'' -e'"" [2025-08-25 21:03:05][352107434643505][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:03:05][352107434643505][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352107434643505\",\"model\":\"SM-T227U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3046\"}'\'' -e'"" [2025-08-25 21:03:10][352107434643505][5546 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98dc6767-cbfe-420a-843c-c8d8b337721a","id":"QR_98dc6767-cbfe-420a-843c-c8d8b337721a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:03:11][352107434643505][5702 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-08-25 21:03:11][352107434643505][5702 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-08-25 21:03:11][352107434643505][5702 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:03:17][358543582588353][0 ms][INFO] === Request start === [2025-08-25 21:03:17][358543582588353][1 ms][DEBUG] START check_scloud [2025-08-25 21:03:17][358543582588353][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:03:17][358543582588353][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 19738 4974 24408928 200164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:03:17][358543582588353][252 ms][DEBUG] targetPkg: running [2025-08-25 21:03:17][358543582588353][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-25 21:03:17][358543582588353][252 ms][DEBUG] START check_boot_completed [2025-08-25 21:03:17][358543582588353][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:03:17][358543582588353][299 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 21:03:17][358543582588353][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:03:17][358543582588353][346 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:03:17][358543582588353][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 21:03:17][358543582588353][346 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:03:17][358543582588353][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543582588353\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1690\"}'\'' -e'"" [2025-08-25 21:03:17][358543582588353][346 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:03:17][358543582588353][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543582588353\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1690\"}'\'' -e'"" [2025-08-25 21:03:22][358543582588353][5235 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0679b9ec-7632-4878-8fdd-63c8478fbba5","id":"QR_0679b9ec-7632-4878-8fdd-63c8478fbba5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:03:22][358543582588353][5391 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3343 [2025-08-25 21:03:22][358543582588353][5391 ms][DEBUG] END runCmdUntilRes#1 in 5046 ms [2025-08-25 21:03:22][358543582588353][5391 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:06:04][350633290204696][1 ms][INFO] === Request start === [2025-08-25 21:06:04][350633290204696][1 ms][DEBUG] START check_scloud [2025-08-25 21:06:04][350633290204696][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:06:05][350633290204696][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 19738 4974 24555424 144864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:06:05][350633290204696][304 ms][DEBUG] targetPkg: running [2025-08-25 21:06:05][350633290204696][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 21:06:05][350633290204696][304 ms][DEBUG] START check_boot_completed [2025-08-25 21:06:05][350633290204696][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:06:05][350633290204696][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 21:06:05][350633290204696][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:06:05][350633290204696][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:06:05][350633290204696][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 21:06:05][350633290204696][382 ms][DEBUG] START check_internet [2025-08-25 21:06:05][350633290204696][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 21:06:05][350633290204696][835 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.285/202.285/202.285/0.000 ms\n [2025-08-25 21:06:05][350633290204696][836 ms][DEBUG] check_internet: online [2025-08-25 21:06:05][350633290204696][836 ms][DEBUG] END check_internet in 454 ms [2025-08-25 21:06:05][350633290204696][836 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:06:05][350633290204696][836 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633290204696\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9310\"}'\'' -e'"" [2025-08-25 21:06:05][350633290204696][836 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:06:05][350633290204696][836 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350633290204696\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9310\"}'\'' -e'"" [2025-08-25 21:06:10][350633290204696][5647 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2d358e0-52a3-47fe-a445-660c8afbe6cf","id":"QR_e2d358e0-52a3-47fe-a445-660c8afbe6cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:06:10][350633290204696][5803 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-08-25 21:06:10][350633290204696][5803 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-08-25 21:06:10][350633290204696][5803 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:07:05][355731678743791][0 ms][INFO] === Request start === [2025-08-25 21:07:05][355731678743791][1 ms][DEBUG] START check_scloud [2025-08-25 21:07:05][355731678743791][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:07:05][355731678743791][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 19738 4974 24685636 155760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:07:05][355731678743791][264 ms][DEBUG] targetPkg: running [2025-08-25 21:07:05][355731678743791][264 ms][DEBUG] END check_scloud in 264 ms [2025-08-25 21:07:05][355731678743791][264 ms][DEBUG] START check_boot_completed [2025-08-25 21:07:05][355731678743791][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:07:05][355731678743791][311 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:07:05][355731678743791][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:07:05][355731678743791][373 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 21:07:05][355731678743791][373 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 21:07:05][355731678743791][373 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:07:05][355731678743791][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731678743791\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2011\"}'\'' -e'"" [2025-08-25 21:07:05][355731678743791][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:07:05][355731678743791][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731678743791\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2011\"}'\'' -e'"" [2025-08-25 21:07:10][355731678743791][5325 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c0bc6c9-056b-4680-abb3-f618bcb9ad13","id":"QR_1c0bc6c9-056b-4680-abb3-f618bcb9ad13","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:07:10][355731678743791][5482 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-25 21:07:10][355731678743791][5482 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-25 21:07:10][355731678743791][5482 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:09:04][350350681179912][1 ms][INFO] === Request start === [2025-08-25 21:09:04][350350681179912][1 ms][DEBUG] START check_scloud [2025-08-25 21:09:04][350350681179912][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:09:05][350350681179912][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 19738 4974 24836396 167296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:09:05][350350681179912][313 ms][DEBUG] targetPkg: running [2025-08-25 21:09:05][350350681179912][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-25 21:09:05][350350681179912][313 ms][DEBUG] START check_boot_completed [2025-08-25 21:09:05][350350681179912][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:09:05][350350681179912][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 21:09:05][350350681179912][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:09:05][350350681179912][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 21:09:05][350350681179912][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 21:09:05][350350681179912][422 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:09:05][350350681179912][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350350681179912\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2576\"}'\'' -e'"" [2025-08-25 21:09:05][350350681179912][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:09:05][350350681179912][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350350681179912\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2576\"}'\'' -e'"" [2025-08-25 21:09:09][350350681179912][4405 ms][DEBUG] proc_open done in 3983 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 21:09:09][350350681179912][4405 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 21:09:09][350350681179912][4405 ms][WARN] Detected error: Process with pid 19738 either refused to load frida-agent, or terminated during injection [2025-08-25 21:09:09][350350681179912][4405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 21:09:09][350350681179912][4530 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 21:09:09][350350681179912][4530 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 21:09:09][350350681179912][4530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 21:09:09][350350681179912][4656 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 21:09:09][350350681179912][4656 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 21:09:09][350350681179912][4858 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 21:09:11][350350681179912][6873 ms][DEBUG] START check_boot_completed [2025-08-25 21:09:11][350350681179912][6874 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:09:11][350350681179912][6920 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:09:11][350350681179912][6921 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:09:11][350350681179912][6983 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 21:09:11][350350681179912][6983 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 21:09:14][350350681179912][9998 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 21:09:14][350350681179912][9998 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350350681179912\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2576\"}'\'' -e'"" [2025-08-25 21:09:19][350350681179912][14981 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8a326cb-95cc-4a63-8c85-02b13a1bd27d","id":"QR_a8a326cb-95cc-4a63-8c85-02b13a1bd27d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:09:20][350350681179912][15137 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-08-25 21:09:20][350350681179912][15137 ms][DEBUG] END runCmdUntilRes#2 in 5140 ms [2025-08-25 21:09:20][350350681179912][15137 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:10:04][351610691109319][0 ms][INFO] === Request start === [2025-08-25 21:10:04][351610691109319][1 ms][DEBUG] START check_scloud [2025-08-25 21:10:04][351610691109319][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:10:04][351610691109319][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 22407 4974 23511572 127660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:10:04][351610691109319][270 ms][DEBUG] targetPkg: running [2025-08-25 21:10:04][351610691109319][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-25 21:10:04][351610691109319][270 ms][DEBUG] START check_boot_completed [2025-08-25 21:10:04][351610691109319][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:10:04][351610691109319][301 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 21:10:04][351610691109319][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:10:05][351610691109319][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:10:05][351610691109319][348 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 21:10:05][351610691109319][348 ms][DEBUG] START check_internet [2025-08-25 21:10:05][351610691109319][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 21:10:05][351610691109319][598 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.772/150.772/150.772/0.000 ms\n [2025-08-25 21:10:05][351610691109319][598 ms][DEBUG] check_internet: online [2025-08-25 21:10:05][351610691109319][598 ms][DEBUG] END check_internet in 250 ms [2025-08-25 21:10:05][351610691109319][598 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:10:05][351610691109319][599 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351610691109319\",\"model\":\"SM-S906E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2153\"}'\'' -e'"" [2025-08-25 21:10:05][351610691109319][599 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:10:05][351610691109319][599 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351610691109319\",\"model\":\"SM-S906E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2153\"}'\'' -e'"" [2025-08-25 21:10:10][351610691109319][5550 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66d5494c-ff75-4984-a0c8-5c5f45a759a2","id":"QR_66d5494c-ff75-4984-a0c8-5c5f45a759a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:10:10][351610691109319][5706 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-25 21:10:10][351610691109319][5706 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-25 21:10:10][351610691109319][5706 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:10:15][352467924042513][0 ms][INFO] === Request start === [2025-08-25 21:10:15][352467924042513][1 ms][DEBUG] START check_scloud [2025-08-25 21:10:15][352467924042513][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:10:15][352467924042513][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 22407 4974 23647836 137988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:10:15][352467924042513][309 ms][DEBUG] targetPkg: running [2025-08-25 21:10:15][352467924042513][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 21:10:15][352467924042513][309 ms][DEBUG] START check_boot_completed [2025-08-25 21:10:15][352467924042513][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:10:15][352467924042513][340 ms][DEBUG] ADB: done in 30 ms; out [2025-08-25 21:10:15][352467924042513][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:10:15][352467924042513][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:10:15][352467924042513][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 21:10:15][352467924042513][387 ms][DEBUG] START check_internet [2025-08-25 21:10:15][352467924042513][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 21:10:16][352467924042513][731 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.851/234.851/234.851/0.000 ms\n [2025-08-25 21:10:16][352467924042513][731 ms][DEBUG] check_internet: online [2025-08-25 21:10:16][352467924042513][731 ms][DEBUG] END check_internet in 344 ms [2025-08-25 21:10:16][352467924042513][731 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:10:16][352467924042513][731 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467924042513\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5101\"}'\'' -e'"" [2025-08-25 21:10:16][352467924042513][731 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:10:16][352467924042513][731 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467924042513\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5101\"}'\'' -e'"" [2025-08-25 21:10:21][352467924042513][5667 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de270b58-5ac6-4cb5-9cf2-3f226aa45628","id":"QR_de270b58-5ac6-4cb5-9cf2-3f226aa45628","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:10:21][352467924042513][5823 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-08-25 21:10:21][352467924042513][5823 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-08-25 21:10:21][352467924042513][5823 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:15:03][355622366329466][1 ms][INFO] === Request start === [2025-08-25 21:15:03][355622366329466][1 ms][DEBUG] START check_scloud [2025-08-25 21:15:03][355622366329466][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:15:03][355622366329466][286 ms][DEBUG] SU: done in 284 ms; outu0_a118 22407 4974 23816932 137936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:15:03][355622366329466][286 ms][DEBUG] targetPkg: running [2025-08-25 21:15:03][355622366329466][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-25 21:15:03][355622366329466][286 ms][DEBUG] START check_boot_completed [2025-08-25 21:15:03][355622366329466][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:15:03][355622366329466][316 ms][DEBUG] ADB: done in 30 ms; out [2025-08-25 21:15:03][355622366329466][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:15:03][355622366329466][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:15:03][355622366329466][364 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 21:15:03][355622366329466][364 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:15:03][355622366329466][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355622366329466\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2011\"}'\'' -e'"" [2025-08-25 21:15:03][355622366329466][364 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:15:03][355622366329466][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355622366329466\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2011\"}'\'' -e'"" [2025-08-25 21:15:07][355622366329466][4503 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd2fad77-38de-467e-89f1-58a81a23a8cf","id":"QR_dd2fad77-38de-467e-89f1-58a81a23a8cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:15:08][355622366329466][4659 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-25 21:15:08][355622366329466][4659 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-25 21:15:08][355622366329466][4659 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:16:04][354106704519252][0 ms][INFO] === Request start === [2025-08-25 21:16:04][354106704519252][1 ms][DEBUG] START check_scloud [2025-08-25 21:16:04][354106704519252][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:16:04][354106704519252][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 22407 4974 23947272 148264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:16:04][354106704519252][312 ms][DEBUG] targetPkg: running [2025-08-25 21:16:04][354106704519252][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 21:16:04][354106704519252][312 ms][DEBUG] START check_boot_completed [2025-08-25 21:16:04][354106704519252][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:16:04][354106704519252][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 21:16:04][354106704519252][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:16:04][354106704519252][407 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 21:16:04][354106704519252][407 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 21:16:04][354106704519252][407 ms][DEBUG] START check_internet [2025-08-25 21:16:04][354106704519252][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 21:16:05][354106704519252][905 ms][DEBUG] SU: done in 498 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.289/200.289/200.289/0.000 ms\n [2025-08-25 21:16:05][354106704519252][905 ms][DEBUG] check_internet: online [2025-08-25 21:16:05][354106704519252][905 ms][DEBUG] END check_internet in 498 ms [2025-08-25 21:16:05][354106704519252][905 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:16:05][354106704519252][905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106704519252\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2263\"}'\'' -e'"" [2025-08-25 21:16:05][354106704519252][905 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:16:05][354106704519252][905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106704519252\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2263\"}'\'' -e'"" [2025-08-25 21:16:10][354106704519252][5841 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd609801-9059-4c45-9a93-2605e9ed0fda","id":"QR_dd609801-9059-4c45-9a93-2605e9ed0fda","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:16:10][354106704519252][5997 ms][DEBUG] proc_open done in 5091 ms; code=255; res.len=3343 [2025-08-25 21:16:10][354106704519252][5997 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-08-25 21:16:10][354106704519252][5997 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:17:04][353548757556700][1 ms][INFO] === Request start === [2025-08-25 21:17:04][353548757556700][1 ms][DEBUG] START check_scloud [2025-08-25 21:17:04][353548757556700][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:17:05][353548757556700][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 22407 4974 24061164 158520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:17:05][353548757556700][260 ms][DEBUG] targetPkg: running [2025-08-25 21:17:05][353548757556700][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-25 21:17:05][353548757556700][260 ms][DEBUG] START check_boot_completed [2025-08-25 21:17:05][353548757556700][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:17:05][353548757556700][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:17:05][353548757556700][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:17:05][353548757556700][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:17:05][353548757556700][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 21:17:05][353548757556700][354 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:17:05][353548757556700][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548757556700\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9571\"}'\'' -e'"" [2025-08-25 21:17:05][353548757556700][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:17:05][353548757556700][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548757556700\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9571\"}'\'' -e'"" [2025-08-25 21:17:10][353548757556700][5305 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_510a0ba3-73ba-41c8-b14a-6146880d22ae","id":"QR_510a0ba3-73ba-41c8-b14a-6146880d22ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:17:10][353548757556700][5462 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-25 21:17:10][353548757556700][5462 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-25 21:17:10][353548757556700][5462 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:17:41][352350271919881][0 ms][INFO] === Request start === [2025-08-25 21:17:41][352350271919881][1 ms][DEBUG] START check_scloud [2025-08-25 21:17:41][352350271919881][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:17:41][352350271919881][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 22407 4974 24166864 170084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:17:41][352350271919881][301 ms][DEBUG] targetPkg: running [2025-08-25 21:17:41][352350271919881][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-25 21:17:41][352350271919881][301 ms][DEBUG] START check_boot_completed [2025-08-25 21:17:41][352350271919881][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:17:41][352350271919881][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 21:17:41][352350271919881][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:17:41][352350271919881][380 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 21:17:41][352350271919881][380 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 21:17:41][352350271919881][380 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:17:41][352350271919881][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350271919881\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8402\"}'\'' -e'"" [2025-08-25 21:17:41][352350271919881][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:17:41][352350271919881][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350271919881\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8402\"}'\'' -e'"" [2025-08-25 21:17:45][352350271919881][4097 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 21:17:45][352350271919881][4253 ms][DEBUG] proc_open done in 3872 ms; code=255; res.len=107 [2025-08-25 21:17:45][352350271919881][4253 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-08-25 21:17:45][352350271919881][4253 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 21:17:45][][0 ms][INFO] === Request start === [2025-08-25 21:17:45][][1 ms][DEBUG] START check_scloud [2025-08-25 21:17:45][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:17:46][][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 22407 4974 24321752 180700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:17:46][][286 ms][DEBUG] targetPkg: running [2025-08-25 21:17:46][][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-25 21:17:46][][286 ms][DEBUG] START check_boot_completed [2025-08-25 21:17:46][][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:17:46][][317 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 21:17:46][][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:17:46][][364 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:17:46][][364 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 21:17:46][][364 ms][DEBUG] rawBody.length=1129 [2025-08-25 21:17:46][][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW6103V1A\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9626\"}'\'' -e'"" [2025-08-25 21:17:46][][364 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:17:46][][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW6103V1A\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9626\"}'\'' -e'"" [2025-08-25 21:17:49][][3566 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 21:17:49][][3722 ms][DEBUG] proc_open done in 3358 ms; code=255; res.len=107 [2025-08-25 21:17:49][][3722 ms][DEBUG] END runCmdUntilRes#1 in 3358 ms [2025-08-25 21:17:49][][3722 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 21:17:51][352350271919881][0 ms][INFO] === Request start === [2025-08-25 21:17:51][352350271919881][1 ms][DEBUG] START check_scloud [2025-08-25 21:17:51][352350271919881][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:17:51][352350271919881][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 22407 4974 24466400 192564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:17:51][352350271919881][310 ms][DEBUG] targetPkg: running [2025-08-25 21:17:51][352350271919881][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-25 21:17:51][352350271919881][310 ms][DEBUG] START check_boot_completed [2025-08-25 21:17:51][352350271919881][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:17:51][352350271919881][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 21:17:51][352350271919881][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:17:51][352350271919881][405 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 21:17:51][352350271919881][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 21:17:51][352350271919881][405 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:17:51][352350271919881][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350271919881\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1303\"}'\'' -e'"" [2025-08-25 21:17:51][352350271919881][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:17:51][352350271919881][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350271919881\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1303\"}'\'' -e'"" [2025-08-25 21:17:56][352350271919881][4934 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3be7a657-e8f5-4910-b423-01d4797c5f7e","id":"QR_3be7a657-e8f5-4910-b423-01d4797c5f7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:17:56][352350271919881][5090 ms][DEBUG] proc_open done in 4685 ms; code=255; res.len=3343 [2025-08-25 21:17:56][352350271919881][5090 ms][DEBUG] END runCmdUntilRes#1 in 4685 ms [2025-08-25 21:17:56][352350271919881][5090 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:19:04][357855571296280][0 ms][INFO] === Request start === [2025-08-25 21:19:04][357855571296280][1 ms][DEBUG] START check_scloud [2025-08-25 21:19:04][357855571296280][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:19:05][357855571296280][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 22407 4974 24586364 201408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:19:05][357855571296280][322 ms][DEBUG] targetPkg: running [2025-08-25 21:19:05][357855571296280][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-25 21:19:05][357855571296280][322 ms][DEBUG] START check_boot_completed [2025-08-25 21:19:05][357855571296280][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:19:05][357855571296280][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:19:05][357855571296280][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:19:05][357855571296280][417 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 21:19:05][357855571296280][417 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 21:19:05][357855571296280][417 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:19:05][357855571296280][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357855571296280\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5577\"}'\'' -e'"" [2025-08-25 21:19:05][357855571296280][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:19:05][357855571296280][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357855571296280\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5577\"}'\'' -e'"" [2025-08-25 21:19:10][357855571296280][5476 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4cfdd7f3-d705-4641-9ac0-87ae7b3d9da5","id":"QR_4cfdd7f3-d705-4641-9ac0-87ae7b3d9da5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:19:10][357855571296280][5633 ms][DEBUG] proc_open done in 5215 ms; code=255; res.len=3343 [2025-08-25 21:19:10][357855571296280][5633 ms][DEBUG] END runCmdUntilRes#1 in 5215 ms [2025-08-25 21:19:10][357855571296280][5633 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:19:16][357526612707979][1 ms][INFO] === Request start === [2025-08-25 21:19:16][357526612707979][1 ms][DEBUG] START check_scloud [2025-08-25 21:19:16][357526612707979][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:19:16][357526612707979][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 22407 4974 24714632 211044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:19:16][357526612707979][299 ms][DEBUG] targetPkg: running [2025-08-25 21:19:16][357526612707979][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 21:19:16][357526612707979][299 ms][DEBUG] START check_boot_completed [2025-08-25 21:19:16][357526612707979][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:19:16][357526612707979][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 21:19:16][357526612707979][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:19:16][357526612707979][394 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 21:19:16][357526612707979][394 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 21:19:16][357526612707979][394 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:19:16][357526612707979][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357526612707979\",\"model\":\"SM-A525M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4847\"}'\'' -e'"" [2025-08-25 21:19:16][357526612707979][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:19:16][357526612707979][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357526612707979\",\"model\":\"SM-A525M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4847\"}'\'' -e'"" [2025-08-25 21:19:21][357526612707979][5172 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58a50dca-7040-4108-8114-5962a369fd94","id":"QR_58a50dca-7040-4108-8114-5962a369fd94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:19:21][357526612707979][5328 ms][DEBUG] proc_open done in 4934 ms; code=255; res.len=3343 [2025-08-25 21:19:21][357526612707979][5328 ms][DEBUG] END runCmdUntilRes#1 in 4934 ms [2025-08-25 21:19:21][357526612707979][5328 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:21:04][353819351924432][0 ms][INFO] === Request start === [2025-08-25 21:21:04][353819351924432][0 ms][DEBUG] START check_scloud [2025-08-25 21:21:04][353819351924432][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:21:04][353819351924432][275 ms][DEBUG] SU: done in 275 ms; outu0_a118 22407 4974 24816200 219792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:21:04][353819351924432][275 ms][DEBUG] targetPkg: running [2025-08-25 21:21:04][353819351924432][275 ms][DEBUG] END check_scloud in 275 ms [2025-08-25 21:21:04][353819351924432][275 ms][DEBUG] START check_boot_completed [2025-08-25 21:21:04][353819351924432][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:21:04][353819351924432][321 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 21:21:04][353819351924432][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:21:04][353819351924432][383 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 21:21:04][353819351924432][384 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 21:21:04][353819351924432][384 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:21:04][353819351924432][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353819351924432\",\"model\":\"SM-N986U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4481\"}'\'' -e'"" [2025-08-25 21:21:04][353819351924432][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:21:04][353819351924432][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353819351924432\",\"model\":\"SM-N986U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4481\"}'\'' -e'"" [2025-08-25 21:21:08][353819351924432][4429 ms][DEBUG] proc_open done in 4045 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 21:21:08][353819351924432][4429 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-25 21:21:08][353819351924432][4429 ms][WARN] Detected error: Process with pid 22407 either refused to load frida-agent, or terminated during injection [2025-08-25 21:21:08][353819351924432][4429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 21:21:08][353819351924432][4554 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 21:21:08][353819351924432][4555 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 21:21:08][353819351924432][4555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 21:21:08][353819351924432][4695 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 21:21:08][353819351924432][4695 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 21:21:09][353819351924432][4867 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 21:21:11][353819351924432][6882 ms][DEBUG] START check_boot_completed [2025-08-25 21:21:11][353819351924432][6882 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:21:11][353819351924432][6929 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:21:11][353819351924432][6929 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:21:11][353819351924432][6976 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:21:11][353819351924432][6976 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 21:21:14][353819351924432][9990 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 21:21:14][353819351924432][9990 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353819351924432\",\"model\":\"SM-N986U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4481\"}'\'' -e'"" [2025-08-25 21:21:19][353819351924432][15208 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dca9fb46-744e-48d2-8505-dcab0c514abc","id":"QR_dca9fb46-744e-48d2-8505-dcab0c514abc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:21:19][353819351924432][15364 ms][DEBUG] proc_open done in 5374 ms; code=255; res.len=3343 [2025-08-25 21:21:19][353819351924432][15364 ms][DEBUG] END runCmdUntilRes#2 in 5374 ms [2025-08-25 21:21:19][353819351924432][15364 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:27:03][355358711786601][1 ms][INFO] === Request start === [2025-08-25 21:27:03][355358711786601][1 ms][DEBUG] START check_scloud [2025-08-25 21:27:03][355358711786601][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:27:03][355358711786601][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 24244 4974 23499880 125928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:27:03][355358711786601][296 ms][DEBUG] targetPkg: running [2025-08-25 21:27:03][355358711786601][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-25 21:27:03][355358711786601][296 ms][DEBUG] START check_boot_completed [2025-08-25 21:27:03][355358711786601][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:27:03][355358711786601][358 ms][DEBUG] ADB: done in 62 ms; out [2025-08-25 21:27:03][355358711786601][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:27:03][355358711786601][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:27:03][355358711786601][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 21:27:03][355358711786601][405 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:27:03][355358711786601][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355358711786601\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9300\"}'\'' -e'"" [2025-08-25 21:27:03][355358711786601][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:27:03][355358711786601][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355358711786601\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9300\"}'\'' -e'"" [2025-08-25 21:27:07][355358711786601][4232 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_84e6d2e9-a144-4092-bb9f-0938709d7abb","id":"QR_84e6d2e9-a144-4092-bb9f-0938709d7abb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:27:07][355358711786601][4388 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-25 21:27:07][355358711786601][4388 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-25 21:27:07][355358711786601][4388 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:31:03][351393984705388][1 ms][INFO] === Request start === [2025-08-25 21:31:03][351393984705388][1 ms][DEBUG] START check_scloud [2025-08-25 21:31:03][351393984705388][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:31:04][351393984705388][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 24244 4974 23623948 137424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:31:04][351393984705388][314 ms][DEBUG] targetPkg: running [2025-08-25 21:31:04][351393984705388][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 21:31:04][351393984705388][314 ms][DEBUG] START check_boot_completed [2025-08-25 21:31:04][351393984705388][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:31:04][351393984705388][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 21:31:04][351393984705388][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:31:04][351393984705388][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:31:04][351393984705388][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 21:31:04][351393984705388][393 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:31:04][351393984705388][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351393984705388\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3472\"}'\'' -e'"" [2025-08-25 21:31:04][351393984705388][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:31:04][351393984705388][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351393984705388\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3472\"}'\'' -e'"" [2025-08-25 21:31:07][351393984705388][4141 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a55705a8-bdac-4ba7-b852-581b35ad6f40","id":"QR_a55705a8-bdac-4ba7-b852-581b35ad6f40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:31:08][351393984705388][4298 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=3343 [2025-08-25 21:31:08][351393984705388][4298 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-25 21:31:08][351393984705388][4298 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:34:04][351874532812255][1 ms][INFO] === Request start === [2025-08-25 21:34:04][351874532812255][1 ms][DEBUG] START check_scloud [2025-08-25 21:34:04][351874532812255][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:34:04][351874532812255][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 24244 4974 23782000 148720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:34:04][351874532812255][309 ms][DEBUG] targetPkg: running [2025-08-25 21:34:04][351874532812255][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 21:34:04][351874532812255][309 ms][DEBUG] START check_boot_completed [2025-08-25 21:34:04][351874532812255][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:34:04][351874532812255][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:34:04][351874532812255][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:34:04][351874532812255][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 21:34:04][351874532812255][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 21:34:04][351874532812255][418 ms][DEBUG] START check_internet [2025-08-25 21:34:04][351874532812255][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 21:34:05][351874532812255][856 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.327/200.327/200.327/0.000 ms\n [2025-08-25 21:34:05][351874532812255][856 ms][DEBUG] check_internet: online [2025-08-25 21:34:05][351874532812255][856 ms][DEBUG] END check_internet in 438 ms [2025-08-25 21:34:05][351874532812255][856 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:34:05][351874532812255][856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351874532812255\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7813\"}'\'' -e'"" [2025-08-25 21:34:05][351874532812255][856 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:34:05][351874532812255][856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351874532812255\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7813\"}'\'' -e'"" [2025-08-25 21:34:10][351874532812255][5901 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac136cd7-3180-4d63-a92d-8971c9b97484","id":"QR_ac136cd7-3180-4d63-a92d-8971c9b97484","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:34:10][351874532812255][6058 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-25 21:34:10][351874532812255][6058 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-25 21:34:10][351874532812255][6058 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:37:05][351283761562229][1 ms][INFO] === Request start === [2025-08-25 21:37:05][351283761562229][1 ms][DEBUG] START check_scloud [2025-08-25 21:37:05][351283761562229][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:37:05][351283761562229][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 24244 4974 23918484 161312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:37:05][351283761562229][316 ms][DEBUG] targetPkg: running [2025-08-25 21:37:05][351283761562229][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-25 21:37:05][351283761562229][316 ms][DEBUG] START check_boot_completed [2025-08-25 21:37:05][351283761562229][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:37:05][351283761562229][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 21:37:05][351283761562229][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:37:05][351283761562229][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:37:05][351283761562229][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 21:37:05][351283761562229][395 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:37:05][351283761562229][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351283761562229\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1446\"}'\'' -e'"" [2025-08-25 21:37:05][351283761562229][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:37:05][351283761562229][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351283761562229\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1446\"}'\'' -e'"" [2025-08-25 21:37:10][351283761562229][5471 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa6e16de-b68d-4b1a-b1df-6f39be67c228","id":"QR_aa6e16de-b68d-4b1a-b1df-6f39be67c228","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:37:11][351283761562229][5627 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-08-25 21:37:11][351283761562229][5627 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-08-25 21:37:11][351283761562229][5628 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:45:29][350443700496381][1 ms][INFO] === Request start === [2025-08-25 21:45:29][350443700496381][1 ms][DEBUG] START check_scloud [2025-08-25 21:45:29][350443700496381][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:45:30][350443700496381][284 ms][DEBUG] SU: done in 282 ms; outu0_a118 24244 4974 24016940 135136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:45:30][350443700496381][284 ms][DEBUG] targetPkg: running [2025-08-25 21:45:30][350443700496381][284 ms][DEBUG] END check_scloud in 282 ms [2025-08-25 21:45:30][350443700496381][284 ms][DEBUG] START check_boot_completed [2025-08-25 21:45:30][350443700496381][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:45:30][350443700496381][315 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 21:45:30][350443700496381][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:45:30][350443700496381][363 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 21:45:30][350443700496381][363 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 21:45:30][350443700496381][363 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:45:30][350443700496381][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350443700496381\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3305\"}'\'' -e'"" [2025-08-25 21:45:30][350443700496381][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:45:30][350443700496381][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350443700496381\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3305\"}'\'' -e'"" [2025-08-25 21:45:34][350443700496381][4142 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 21:45:34][350443700496381][4298 ms][DEBUG] proc_open done in 3935 ms; code=255; res.len=107 [2025-08-25 21:45:34][350443700496381][4298 ms][DEBUG] END runCmdUntilRes#1 in 3935 ms [2025-08-25 21:45:34][350443700496381][4298 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 21:45:34][][0 ms][INFO] === Request start === [2025-08-25 21:45:34][][1 ms][DEBUG] START check_scloud [2025-08-25 21:45:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:45:34][][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 24244 4974 24172800 132852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:45:34][][312 ms][DEBUG] targetPkg: running [2025-08-25 21:45:34][][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 21:45:34][][312 ms][DEBUG] START check_boot_completed [2025-08-25 21:45:34][][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:45:34][][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 21:45:34][][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:45:34][][391 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 21:45:34][][391 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 21:45:34][][392 ms][DEBUG] rawBody.length=1129 [2025-08-25 21:45:34][][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW70258AP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6211\"}'\'' -e'"" [2025-08-25 21:45:34][][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:45:34][][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW70258AP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6211\"}'\'' -e'"" [2025-08-25 21:45:38][][3827 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 21:45:38][][3983 ms][DEBUG] proc_open done in 3591 ms; code=255; res.len=107 [2025-08-25 21:45:38][][3983 ms][DEBUG] END runCmdUntilRes#1 in 3591 ms [2025-08-25 21:45:38][][3983 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 21:45:40][350443700496381][0 ms][INFO] === Request start === [2025-08-25 21:45:40][350443700496381][1 ms][DEBUG] START check_scloud [2025-08-25 21:45:40][350443700496381][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:45:40][350443700496381][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 24244 4974 24323592 143132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:45:40][350443700496381][273 ms][DEBUG] targetPkg: running [2025-08-25 21:45:40][350443700496381][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-25 21:45:40][350443700496381][273 ms][DEBUG] START check_boot_completed [2025-08-25 21:45:40][350443700496381][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:45:40][350443700496381][320 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:45:40][350443700496381][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:45:40][350443700496381][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:45:40][350443700496381][367 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 21:45:40][350443700496381][367 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:45:40][350443700496381][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350443700496381\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1243\"}'\'' -e'"" [2025-08-25 21:45:40][350443700496381][367 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:45:40][350443700496381][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350443700496381\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1243\"}'\'' -e'"" [2025-08-25 21:45:45][350443700496381][5006 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_169d1242-b39d-4461-8b94-c81c71bdaf39","id":"QR_169d1242-b39d-4461-8b94-c81c71bdaf39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:45:45][350443700496381][5162 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-25 21:45:45][350443700496381][5162 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-25 21:45:45][350443700496381][5162 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:46:04][352682504533570][0 ms][INFO] === Request start === [2025-08-25 21:46:04][352682504533570][1 ms][DEBUG] START check_scloud [2025-08-25 21:46:04][352682504533570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:46:05][352682504533570][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 24244 4974 24439460 150100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:46:05][352682504533570][270 ms][DEBUG] targetPkg: running [2025-08-25 21:46:05][352682504533570][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-25 21:46:05][352682504533570][270 ms][DEBUG] START check_boot_completed [2025-08-25 21:46:05][352682504533570][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:46:05][352682504533570][317 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:46:05][352682504533570][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:46:05][352682504533570][379 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 21:46:05][352682504533570][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 21:46:05][352682504533570][379 ms][DEBUG] START check_internet [2025-08-25 21:46:05][352682504533570][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 21:46:05][352682504533570][801 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.562/201.562/201.562/0.000 ms\n [2025-08-25 21:46:05][352682504533570][801 ms][DEBUG] check_internet: online [2025-08-25 21:46:05][352682504533570][801 ms][DEBUG] END check_internet in 422 ms [2025-08-25 21:46:05][352682504533570][801 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:46:05][352682504533570][801 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682504533570\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6514\"}'\'' -e'"" [2025-08-25 21:46:05][352682504533570][801 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:46:05][352682504533570][801 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682504533570\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6514\"}'\'' -e'"" [2025-08-25 21:46:10][352682504533570][5441 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a58279f2-ab06-4a1d-9ece-0828b4256273","id":"QR_a58279f2-ab06-4a1d-9ece-0828b4256273","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:46:10][352682504533570][5597 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-08-25 21:46:10][352682504533570][5597 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-08-25 21:46:10][352682504533570][5597 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:46:15][353384830295409][0 ms][INFO] === Request start === [2025-08-25 21:46:15][353384830295409][0 ms][DEBUG] START check_scloud [2025-08-25 21:46:15][353384830295409][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:46:15][353384830295409][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 24244 4974 24590252 161440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:46:15][353384830295409][305 ms][DEBUG] targetPkg: running [2025-08-25 21:46:15][353384830295409][305 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 21:46:15][353384830295409][305 ms][DEBUG] START check_boot_completed [2025-08-25 21:46:15][353384830295409][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:46:15][353384830295409][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 21:46:15][353384830295409][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:46:15][353384830295409][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:46:15][353384830295409][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 21:46:15][353384830295409][383 ms][DEBUG] START check_internet [2025-08-25 21:46:15][353384830295409][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 21:46:16][353384830295409][696 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=210 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 210.853/210.853/210.853/0.000 ms\n [2025-08-25 21:46:16][353384830295409][696 ms][DEBUG] check_internet: online [2025-08-25 21:46:16][353384830295409][696 ms][DEBUG] END check_internet in 313 ms [2025-08-25 21:46:16][353384830295409][696 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:46:16][353384830295409][696 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353384830295409\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9030\"}'\'' -e'"" [2025-08-25 21:46:16][353384830295409][696 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:46:16][353384830295409][696 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353384830295409\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9030\"}'\'' -e'"" [2025-08-25 21:46:20][353384830295409][5335 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4728760-05e0-44b1-91c7-d781f698e036","id":"QR_b4728760-05e0-44b1-91c7-d781f698e036","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:46:21][353384830295409][5492 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-25 21:46:21][353384830295409][5492 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-25 21:46:21][353384830295409][5492 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:47:03][355322298946988][0 ms][INFO] === Request start === [2025-08-25 21:47:03][355322298946988][1 ms][DEBUG] START check_scloud [2025-08-25 21:47:03][355322298946988][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:47:03][355322298946988][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 24244 4974 24719980 172604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:47:03][355322298946988][312 ms][DEBUG] targetPkg: running [2025-08-25 21:47:03][355322298946988][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 21:47:03][355322298946988][312 ms][DEBUG] START check_boot_completed [2025-08-25 21:47:03][355322298946988][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:47:03][355322298946988][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 21:47:03][355322298946988][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:47:03][355322298946988][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:47:03][355322298946988][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 21:47:03][355322298946988][405 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:47:03][355322298946988][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322298946988\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2483\"}'\'' -e'"" [2025-08-25 21:47:03][355322298946988][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:47:03][355322298946988][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322298946988\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2483\"}'\'' -e'"" [2025-08-25 21:47:07][355322298946988][4108 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d3fd8ae-0155-4b73-bd1d-47f6e3d97aa0","id":"QR_9d3fd8ae-0155-4b73-bd1d-47f6e3d97aa0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:47:07][355322298946988][4264 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-25 21:47:07][355322298946988][4264 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-25 21:47:07][355322298946988][4264 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:47:08][350938281488079][0 ms][INFO] === Request start === [2025-08-25 21:47:08][350938281488079][1 ms][DEBUG] START check_scloud [2025-08-25 21:47:08][350938281488079][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:47:09][350938281488079][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 24244 4974 24860532 184444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:47:09][350938281488079][304 ms][DEBUG] targetPkg: running [2025-08-25 21:47:09][350938281488079][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-25 21:47:09][350938281488079][304 ms][DEBUG] START check_boot_completed [2025-08-25 21:47:09][350938281488079][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:47:09][350938281488079][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 21:47:09][350938281488079][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:47:09][350938281488079][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:47:09][350938281488079][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 21:47:09][350938281488079][397 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:47:09][350938281488079][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281488079\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8816\"}'\'' -e'"" [2025-08-25 21:47:09][350938281488079][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:47:09][350938281488079][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281488079\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8816\"}'\'' -e'"" [2025-08-25 21:47:13][350938281488079][4537 ms][DEBUG] proc_open done in 4140 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 21:47:13][350938281488079][4537 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-08-25 21:47:13][350938281488079][4538 ms][WARN] Detected error: Process with pid 24244 either refused to load frida-agent, or terminated during injection [2025-08-25 21:47:13][350938281488079][4538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 21:47:13][350938281488079][4693 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 21:47:13][350938281488079][4694 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 21:47:13][350938281488079][4694 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 21:47:13][350938281488079][4818 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 21:47:13][350938281488079][4818 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 21:47:13][350938281488079][4990 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 21:47:15][350938281488079][7005 ms][DEBUG] START check_boot_completed [2025-08-25 21:47:15][350938281488079][7005 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:47:15][350938281488079][7052 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:47:15][350938281488079][7052 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:47:15][350938281488079][7099 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:47:15][350938281488079][7100 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 21:47:19][350938281488079][10114 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 21:47:19][350938281488079][10114 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281488079\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8816\"}'\'' -e'"" [2025-08-25 21:47:22][350938281488079][13441 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e91318e-4504-4fff-8e99-92d82de29c85","id":"QR_9e91318e-4504-4fff-8e99-92d82de29c85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:47:22][350938281488079][13598 ms][DEBUG] proc_open done in 3484 ms; code=255; res.len=3343 [2025-08-25 21:47:22][350938281488079][13598 ms][DEBUG] END runCmdUntilRes#2 in 3484 ms [2025-08-25 21:47:22][350938281488079][13598 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:48:02][352208774016821][1 ms][INFO] === Request start === [2025-08-25 21:48:02][352208774016821][1 ms][DEBUG] START check_scloud [2025-08-25 21:48:02][352208774016821][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:48:02][352208774016821][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 27511 4974 23515924 127588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:48:02][352208774016821][319 ms][DEBUG] targetPkg: running [2025-08-25 21:48:02][352208774016821][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 21:48:02][352208774016821][319 ms][DEBUG] START check_boot_completed [2025-08-25 21:48:02][352208774016821][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:48:02][352208774016821][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 21:48:02][352208774016821][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:48:02][352208774016821][459 ms][DEBUG] SU: done in 94 ms; out [2025-08-25 21:48:02][352208774016821][460 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-25 21:48:02][352208774016821][460 ms][DEBUG] START check_internet [2025-08-25 21:48:02][352208774016821][460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 21:48:02][352208774016821][740 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.039/171.039/171.039/0.000 ms\n [2025-08-25 21:48:02][352208774016821][740 ms][DEBUG] check_internet: online [2025-08-25 21:48:02][352208774016821][740 ms][DEBUG] END check_internet in 281 ms [2025-08-25 21:48:02][352208774016821][740 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:48:02][352208774016821][741 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208774016821\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5299\"}'\'' -e'"" [2025-08-25 21:48:02][352208774016821][741 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:48:02][352208774016821][741 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208774016821\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5299\"}'\'' -e'"" [2025-08-25 21:48:06][352208774016821][4255 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_987b90d4-52ce-413f-8fa8-519cadd1bf3c","id":"QR_987b90d4-52ce-413f-8fa8-519cadd1bf3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:48:06][352208774016821][4411 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=3343 [2025-08-25 21:48:06][352208774016821][4411 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-25 21:48:06][352208774016821][4411 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:52:05][356150113680592][1 ms][INFO] === Request start === [2025-08-25 21:52:05][356150113680592][1 ms][DEBUG] START check_scloud [2025-08-25 21:52:05][356150113680592][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:52:05][356150113680592][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 27511 4974 23626668 138552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:52:05][356150113680592][309 ms][DEBUG] targetPkg: running [2025-08-25 21:52:05][356150113680592][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 21:52:05][356150113680592][309 ms][DEBUG] START check_boot_completed [2025-08-25 21:52:05][356150113680592][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:52:05][356150113680592][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 21:52:05][356150113680592][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:52:05][356150113680592][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:52:05][356150113680592][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 21:52:05][356150113680592][387 ms][DEBUG] START check_internet [2025-08-25 21:52:05][356150113680592][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 21:52:05][356150113680592][871 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.635/202.635/202.635/0.000 ms\n [2025-08-25 21:52:05][356150113680592][871 ms][DEBUG] check_internet: online [2025-08-25 21:52:05][356150113680592][871 ms][DEBUG] END check_internet in 484 ms [2025-08-25 21:52:05][356150113680592][871 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:52:05][356150113680592][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356150113680592\",\"model\":\"SM-A315G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5484\"}'\'' -e'"" [2025-08-25 21:52:05][356150113680592][871 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:52:05][356150113680592][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356150113680592\",\"model\":\"SM-A315G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5484\"}'\'' -e'"" [2025-08-25 21:52:11][356150113680592][5964 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_926ae3d8-a294-4166-b1a3-275f8bb81444","id":"QR_926ae3d8-a294-4166-b1a3-275f8bb81444","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:52:11][356150113680592][6120 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-08-25 21:52:11][356150113680592][6120 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-08-25 21:52:11][356150113680592][6120 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:53:04][350722246071935][1 ms][INFO] === Request start === [2025-08-25 21:53:04][350722246071935][1 ms][DEBUG] START check_scloud [2025-08-25 21:53:04][350722246071935][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:53:04][350722246071935][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 27511 4974 23801004 150240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:53:04][350722246071935][300 ms][DEBUG] targetPkg: running [2025-08-25 21:53:04][350722246071935][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 21:53:04][350722246071935][300 ms][DEBUG] START check_boot_completed [2025-08-25 21:53:04][350722246071935][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:53:04][350722246071935][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 21:53:04][350722246071935][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:53:04][350722246071935][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:53:04][350722246071935][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 21:53:04][350722246071935][394 ms][DEBUG] rawBody.length=1149 [2025-08-25 21:53:04][350722246071935][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350722246071935\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7554\"}'\'' -e'"" [2025-08-25 21:53:04][350722246071935][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:53:04][350722246071935][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350722246071935\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7554\"}'\'' -e'"" [2025-08-25 21:53:09][350722246071935][5033 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_986dc62f-c042-47df-a79f-401b385f3020","id":"QR_986dc62f-c042-47df-a79f-401b385f3020","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:53:09][350722246071935][5189 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-08-25 21:53:09][350722246071935][5189 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-08-25 21:53:09][350722246071935][5190 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 21:59:03][352978604931627][1 ms][INFO] === Request start === [2025-08-25 21:59:03][352978604931627][1 ms][DEBUG] START check_scloud [2025-08-25 21:59:03][352978604931627][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 21:59:04][352978604931627][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 27511 4974 23917712 161552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 21:59:04][352978604931627][251 ms][DEBUG] targetPkg: running [2025-08-25 21:59:04][352978604931627][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-25 21:59:04][352978604931627][251 ms][DEBUG] START check_boot_completed [2025-08-25 21:59:04][352978604931627][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 21:59:04][352978604931627][281 ms][DEBUG] ADB: done in 30 ms; out [2025-08-25 21:59:04][352978604931627][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 21:59:04][352978604931627][328 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 21:59:04][352978604931627][328 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-25 21:59:04][352978604931627][328 ms][DEBUG] rawBody.length=1148 [2025-08-25 21:59:04][352978604931627][328 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978604931627\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6404\"}'\'' -e'"" [2025-08-25 21:59:04][352978604931627][328 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 21:59:04][352978604931627][328 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978604931627\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6404\"}'\'' -e'"" [2025-08-25 21:59:08][352978604931627][4921 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2be44f6b-98ab-4408-af2b-f391536f4580","id":"QR_2be44f6b-98ab-4408-af2b-f391536f4580","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 21:59:08][352978604931627][5077 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3343 [2025-08-25 21:59:08][352978604931627][5077 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-08-25 21:59:08][352978604931627][5077 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:05:05][355139240429909][1 ms][INFO] === Request start === [2025-08-25 22:05:05][355139240429909][1 ms][DEBUG] START check_scloud [2025-08-25 22:05:05][355139240429909][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:05:05][355139240429909][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 27511 4974 24051892 172668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:05:05][355139240429909][315 ms][DEBUG] targetPkg: running [2025-08-25 22:05:05][355139240429909][315 ms][DEBUG] END check_scloud in 313 ms [2025-08-25 22:05:05][355139240429909][315 ms][DEBUG] START check_boot_completed [2025-08-25 22:05:05][355139240429909][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:05:05][355139240429909][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 22:05:05][355139240429909][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:05:05][355139240429909][394 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 22:05:05][355139240429909][394 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 22:05:05][355139240429909][394 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:05:05][355139240429909][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355139240429909\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2306\"}'\'' -e'"" [2025-08-25 22:05:05][355139240429909][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:05:05][355139240429909][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355139240429909\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2306\"}'\'' -e'"" [2025-08-25 22:05:10][355139240429909][5141 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12c769ba-cb43-47b1-9aa8-f0ff0ecba436","id":"QR_12c769ba-cb43-47b1-9aa8-f0ff0ecba436","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:05:10][355139240429909][5298 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-08-25 22:05:10][355139240429909][5298 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-08-25 22:05:10][355139240429909][5298 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:07:02][350961873094600][1 ms][INFO] === Request start === [2025-08-25 22:07:02][350961873094600][1 ms][DEBUG] START check_scloud [2025-08-25 22:07:02][350961873094600][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:07:03][350961873094600][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 27511 4974 24212888 184272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:07:03][350961873094600][307 ms][DEBUG] targetPkg: running [2025-08-25 22:07:03][350961873094600][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-25 22:07:03][350961873094600][307 ms][DEBUG] START check_boot_completed [2025-08-25 22:07:03][350961873094600][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:07:03][350961873094600][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 22:07:03][350961873094600][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:07:03][350961873094600][402 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 22:07:03][350961873094600][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 22:07:03][350961873094600][402 ms][DEBUG] rawBody.length=1148 [2025-08-25 22:07:03][350961873094600][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961873094600\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7343\"}'\'' -e'"" [2025-08-25 22:07:03][350961873094600][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:07:03][350961873094600][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961873094600\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7343\"}'\'' -e'"" [2025-08-25 22:07:06][350961873094600][4165 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd3a1765-c19a-4e09-9201-f03e8c7739b9","id":"QR_cd3a1765-c19a-4e09-9201-f03e8c7739b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:07:07][350961873094600][4321 ms][DEBUG] proc_open done in 3919 ms; code=255; res.len=3343 [2025-08-25 22:07:07][350961873094600][4321 ms][DEBUG] END runCmdUntilRes#1 in 3919 ms [2025-08-25 22:07:07][350961873094600][4321 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:07:08][350673971468004][0 ms][INFO] === Request start === [2025-08-25 22:07:08][350673971468004][1 ms][DEBUG] START check_scloud [2025-08-25 22:07:08][350673971468004][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:07:08][350673971468004][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 27511 4974 24373920 195316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:07:08][350673971468004][325 ms][DEBUG] targetPkg: running [2025-08-25 22:07:08][350673971468004][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-25 22:07:08][350673971468004][325 ms][DEBUG] START check_boot_completed [2025-08-25 22:07:08][350673971468004][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:07:08][350673971468004][371 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 22:07:08][350673971468004][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:07:08][350673971468004][418 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:07:08][350673971468004][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 22:07:08][350673971468004][418 ms][DEBUG] rawBody.length=1148 [2025-08-25 22:07:08][350673971468004][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350673971468004\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LEL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9829\"}'\'' -e'"" [2025-08-25 22:07:08][350673971468004][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:07:08][350673971468004][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350673971468004\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LEL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9829\"}'\'' -e'"" [2025-08-25 22:07:12][350673971468004][3933 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0eaf4e69-f435-4edf-8c18-5051aa0dc6cb","id":"QR_0eaf4e69-f435-4edf-8c18-5051aa0dc6cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:07:12][350673971468004][4089 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=3343 [2025-08-25 22:07:12][350673971468004][4089 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-25 22:07:12][350673971468004][4089 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:11:03][356167113708751][1 ms][INFO] === Request start === [2025-08-25 22:11:03][356167113708751][1 ms][DEBUG] START check_scloud [2025-08-25 22:11:03][356167113708751][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:11:03][356167113708751][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 27511 4974 24504032 206500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:11:03][356167113708751][254 ms][DEBUG] targetPkg: running [2025-08-25 22:11:03][356167113708751][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-25 22:11:03][356167113708751][254 ms][DEBUG] START check_boot_completed [2025-08-25 22:11:03][356167113708751][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:11:03][356167113708751][285 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 22:11:03][356167113708751][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:11:03][356167113708751][332 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:11:03][356167113708751][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 22:11:03][356167113708751][332 ms][DEBUG] rawBody.length=1147 [2025-08-25 22:11:03][356167113708751][332 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356167113708751\",\"model\":\"SM-T875\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1044\"}'\'' -e'"" [2025-08-25 22:11:03][356167113708751][332 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:11:03][356167113708751][332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356167113708751\",\"model\":\"SM-T875\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1044\"}'\'' -e'"" [2025-08-25 22:11:11][356167113708751][7596 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_457e9f35-af52-4dd9-9d16-13adac4522e1","id":"QR_457e9f35-af52-4dd9-9d16-13adac4522e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:11:11][356167113708751][7752 ms][DEBUG] proc_open done in 7420 ms; code=255; res.len=3343 [2025-08-25 22:11:11][356167113708751][7752 ms][DEBUG] END runCmdUntilRes#1 in 7420 ms [2025-08-25 22:11:11][356167113708751][7752 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:13:04][352177393586540][1 ms][INFO] === Request start === [2025-08-25 22:13:04][352177393586540][1 ms][DEBUG] START check_scloud [2025-08-25 22:13:04][352177393586540][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:13:05][352177393586540][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 27511 4974 24644548 218736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:13:05][352177393586540][274 ms][DEBUG] targetPkg: running [2025-08-25 22:13:05][352177393586540][274 ms][DEBUG] END check_scloud in 273 ms [2025-08-25 22:13:05][352177393586540][274 ms][DEBUG] START check_boot_completed [2025-08-25 22:13:05][352177393586540][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:13:05][352177393586540][321 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 22:13:05][352177393586540][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:13:05][352177393586540][369 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 22:13:05][352177393586540][369 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 22:13:05][352177393586540][369 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:13:05][352177393586540][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177393586540\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7885\"}'\'' -e'"" [2025-08-25 22:13:05][352177393586540][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:13:05][352177393586540][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177393586540\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7885\"}'\'' -e'"" [2025-08-25 22:13:10][352177393586540][5507 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5f59ba6-1c82-4768-a786-a071d9737e76","id":"QR_d5f59ba6-1c82-4768-a786-a071d9737e76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:13:10][352177393586540][5663 ms][DEBUG] proc_open done in 5293 ms; code=255; res.len=3343 [2025-08-25 22:13:10][352177393586540][5663 ms][DEBUG] END runCmdUntilRes#1 in 5294 ms [2025-08-25 22:13:10][352177393586540][5663 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:18:03][358184579649393][1 ms][INFO] === Request start === [2025-08-25 22:18:03][358184579649393][1 ms][DEBUG] START check_scloud [2025-08-25 22:18:03][358184579649393][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:18:03][358184579649393][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 27511 4974 24760360 229748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:18:03][358184579649393][305 ms][DEBUG] targetPkg: running [2025-08-25 22:18:03][358184579649393][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-25 22:18:03][358184579649393][305 ms][DEBUG] START check_boot_completed [2025-08-25 22:18:03][358184579649393][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:18:03][358184579649393][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 22:18:03][358184579649393][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:18:03][358184579649393][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 22:18:03][358184579649393][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 22:18:03][358184579649393][415 ms][DEBUG] START check_internet [2025-08-25 22:18:03][358184579649393][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 22:18:04][358184579649393][899 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.340/202.340/202.340/0.000 ms\n [2025-08-25 22:18:04][358184579649393][899 ms][DEBUG] check_internet: online [2025-08-25 22:18:04][358184579649393][899 ms][DEBUG] END check_internet in 484 ms [2025-08-25 22:18:04][358184579649393][899 ms][DEBUG] rawBody.length=1148 [2025-08-25 22:18:04][358184579649393][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184579649393\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2642\"}'\'' -e'"" [2025-08-25 22:18:04][358184579649393][899 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:18:04][358184579649393][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184579649393\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2642\"}'\'' -e'"" [2025-08-25 22:18:09][358184579649393][5491 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_faa41b49-4cd6-4a1e-af5e-c9aef19063cf","id":"QR_faa41b49-4cd6-4a1e-af5e-c9aef19063cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:18:09][358184579649393][5647 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=3343 [2025-08-25 22:18:09][358184579649393][5648 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-08-25 22:18:09][358184579649393][5648 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:23:05][354598400019449][1 ms][INFO] === Request start === [2025-08-25 22:23:05][354598400019449][1 ms][DEBUG] START check_scloud [2025-08-25 22:23:05][354598400019449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:23:05][354598400019449][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 27511 4974 24866060 241744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:23:05][354598400019449][264 ms][DEBUG] targetPkg: running [2025-08-25 22:23:05][354598400019449][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-25 22:23:05][354598400019449][264 ms][DEBUG] START check_boot_completed [2025-08-25 22:23:05][354598400019449][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:23:05][354598400019449][295 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 22:23:05][354598400019449][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:23:05][354598400019449][342 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:23:05][354598400019449][342 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 22:23:05][354598400019449][342 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:23:05][354598400019449][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354598400019449\",\"model\":\"SM-S906U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6860\"}'\'' -e'"" [2025-08-25 22:23:05][354598400019449][342 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:23:05][354598400019449][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354598400019449\",\"model\":\"SM-S906U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6860\"}'\'' -e'"" [2025-08-25 22:23:09][354598400019449][3997 ms][DEBUG] proc_open done in 3655 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 22:23:09][354598400019449][3997 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-25 22:23:09][354598400019449][3997 ms][WARN] Detected error: Process with pid 27511 either refused to load frida-agent, or terminated during injection [2025-08-25 22:23:09][354598400019449][3997 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 22:23:09][354598400019449][4123 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 22:23:09][354598400019449][4123 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 22:23:09][354598400019449][4123 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 22:23:09][354598400019449][4263 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 22:23:09][354598400019449][4263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 22:23:09][354598400019449][4404 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 22:23:11][354598400019449][6419 ms][DEBUG] START check_boot_completed [2025-08-25 22:23:11][354598400019449][6419 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:23:11][354598400019449][6466 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 22:23:11][354598400019449][6466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:23:11][354598400019449][6528 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 22:23:11][354598400019449][6528 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 22:23:14][354598400019449][9543 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 22:23:14][354598400019449][9543 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354598400019449\",\"model\":\"SM-S906U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6860\"}'\'' -e'"" [2025-08-25 22:23:19][354598400019449][14042 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e29d9797-9d55-40cd-a377-e8952cef13ca","id":"QR_e29d9797-9d55-40cd-a377-e8952cef13ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:23:19][354598400019449][14198 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-08-25 22:23:19][354598400019449][14198 ms][DEBUG] END runCmdUntilRes#2 in 4655 ms [2025-08-25 22:23:19][354598400019449][14198 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:27:05][352349697282049][1 ms][INFO] === Request start === [2025-08-25 22:27:05][352349697282049][1 ms][DEBUG] START check_scloud [2025-08-25 22:27:05][352349697282049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:27:05][352349697282049][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 29406 4974 23469768 127380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:27:05][352349697282049][318 ms][DEBUG] targetPkg: running [2025-08-25 22:27:05][352349697282049][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-25 22:27:05][352349697282049][318 ms][DEBUG] START check_boot_completed [2025-08-25 22:27:05][352349697282049][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:27:05][352349697282049][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 22:27:05][352349697282049][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:27:05][352349697282049][413 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 22:27:05][352349697282049][413 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 22:27:05][352349697282049][413 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:27:05][352349697282049][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349697282049\",\"model\":\"SM-G781W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5401\"}'\'' -e'"" [2025-08-25 22:27:05][352349697282049][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:27:05][352349697282049][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349697282049\",\"model\":\"SM-G781W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5401\"}'\'' -e'"" [2025-08-25 22:27:10][352349697282049][5348 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38d26539-4a66-4bfd-8cf5-88b948d54552","id":"QR_38d26539-4a66-4bfd-8cf5-88b948d54552","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:27:10][352349697282049][5504 ms][DEBUG] proc_open done in 5090 ms; code=255; res.len=3343 [2025-08-25 22:27:10][352349697282049][5504 ms][DEBUG] END runCmdUntilRes#1 in 5090 ms [2025-08-25 22:27:10][352349697282049][5504 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:28:04][354314906209652][0 ms][INFO] === Request start === [2025-08-25 22:28:04][354314906209652][1 ms][DEBUG] START check_scloud [2025-08-25 22:28:04][354314906209652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:28:05][354314906209652][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 29406 4974 23617416 138088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:28:05][354314906209652][318 ms][DEBUG] targetPkg: running [2025-08-25 22:28:05][354314906209652][318 ms][DEBUG] END check_scloud in 318 ms [2025-08-25 22:28:05][354314906209652][318 ms][DEBUG] START check_boot_completed [2025-08-25 22:28:05][354314906209652][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:28:05][354314906209652][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 22:28:05][354314906209652][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:28:05][354314906209652][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:28:05][354314906209652][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 22:28:05][354314906209652][412 ms][DEBUG] START check_internet [2025-08-25 22:28:05][354314906209652][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 22:28:05][354314906209652][865 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.370/201.370/201.370/0.000 ms\n [2025-08-25 22:28:05][354314906209652][865 ms][DEBUG] check_internet: online [2025-08-25 22:28:05][354314906209652][865 ms][DEBUG] END check_internet in 453 ms [2025-08-25 22:28:05][354314906209652][865 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:28:05][354314906209652][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314906209652\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4512\"}'\'' -e'"" [2025-08-25 22:28:05][354314906209652][865 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:28:05][354314906209652][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314906209652\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4512\"}'\'' -e'"" [2025-08-25 22:28:10][354314906209652][5817 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9cf6d922-6afa-4745-b279-c38f2fd9b769","id":"QR_9cf6d922-6afa-4745-b279-c38f2fd9b769","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:28:10][354314906209652][5973 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-25 22:28:10][354314906209652][5973 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-25 22:28:10][354314906209652][5973 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:30:04][351676568208633][1 ms][INFO] === Request start === [2025-08-25 22:30:04][351676568208633][1 ms][DEBUG] START check_scloud [2025-08-25 22:30:04][351676568208633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:30:04][351676568208633][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 29406 4974 23727148 150252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:30:04][351676568208633][252 ms][DEBUG] targetPkg: running [2025-08-25 22:30:04][351676568208633][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-25 22:30:04][351676568208633][253 ms][DEBUG] START check_boot_completed [2025-08-25 22:30:04][351676568208633][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:30:04][351676568208633][299 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 22:30:04][351676568208633][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:30:04][351676568208633][346 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:30:04][351676568208633][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 22:30:04][351676568208633][346 ms][DEBUG] START check_internet [2025-08-25 22:30:04][351676568208633][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 22:30:04][351676568208633][674 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.115/221.115/221.115/0.000 ms\n [2025-08-25 22:30:04][351676568208633][674 ms][DEBUG] check_internet: online [2025-08-25 22:30:04][351676568208633][674 ms][DEBUG] END check_internet in 328 ms [2025-08-25 22:30:04][351676568208633][674 ms][DEBUG] rawBody.length=1148 [2025-08-25 22:30:04][351676568208633][674 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676568208633\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1711\"}'\'' -e'"" [2025-08-25 22:30:04][351676568208633][674 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:30:04][351676568208633][675 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676568208633\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1711\"}'\'' -e'"" [2025-08-25 22:30:08][351676568208633][4532 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70509c1f-0007-412a-a9c9-02eeeca0d7f9","id":"QR_70509c1f-0007-412a-a9c9-02eeeca0d7f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:30:08][351676568208633][4688 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-25 22:30:08][351676568208633][4688 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-25 22:30:08][351676568208633][4688 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:30:12][357714710925103][0 ms][INFO] === Request start === [2025-08-25 22:30:12][357714710925103][1 ms][DEBUG] START check_scloud [2025-08-25 22:30:12][357714710925103][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:30:13][357714710925103][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 29406 4974 23871796 161280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:30:13][357714710925103][323 ms][DEBUG] targetPkg: running [2025-08-25 22:30:13][357714710925103][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-25 22:30:13][357714710925103][323 ms][DEBUG] START check_boot_completed [2025-08-25 22:30:13][357714710925103][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:30:13][357714710925103][354 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 22:30:13][357714710925103][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:30:13][357714710925103][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:30:13][357714710925103][401 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 22:30:13][357714710925103][401 ms][DEBUG] START check_internet [2025-08-25 22:30:13][357714710925103][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 22:30:13][357714710925103][666 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=159 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 159.161/159.161/159.161/0.000 ms\n [2025-08-25 22:30:13][357714710925103][666 ms][DEBUG] check_internet: online [2025-08-25 22:30:13][357714710925103][666 ms][DEBUG] END check_internet in 265 ms [2025-08-25 22:30:13][357714710925103][666 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:30:13][357714710925103][666 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357714710925103\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8226\"}'\'' -e'"" [2025-08-25 22:30:13][357714710925103][666 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:30:13][357714710925103][666 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357714710925103\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8226\"}'\'' -e'"" [2025-08-25 22:30:18][357714710925103][5712 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a5258c3-4d0b-43b3-b8a1-924092c96fe7","id":"QR_0a5258c3-4d0b-43b3-b8a1-924092c96fe7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:30:18][357714710925103][5868 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-08-25 22:30:18][357714710925103][5868 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-08-25 22:30:18][357714710925103][5868 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:36:04][351162211391183][1 ms][INFO] === Request start === [2025-08-25 22:36:04][351162211391183][1 ms][DEBUG] START check_scloud [2025-08-25 22:36:04][351162211391183][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:36:04][351162211391183][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 29406 4974 24009204 172664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:36:04][351162211391183][312 ms][DEBUG] targetPkg: running [2025-08-25 22:36:04][351162211391183][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-25 22:36:04][351162211391183][312 ms][DEBUG] START check_boot_completed [2025-08-25 22:36:04][351162211391183][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:36:05][351162211391183][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 22:36:05][351162211391183][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:36:05][351162211391183][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:36:05][351162211391183][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 22:36:05][351162211391183][391 ms][DEBUG] START check_internet [2025-08-25 22:36:05][351162211391183][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 22:36:05][351162211391183][672 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=159 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 159.148/159.148/159.148/0.000 ms\n [2025-08-25 22:36:05][351162211391183][672 ms][DEBUG] check_internet: online [2025-08-25 22:36:05][351162211391183][672 ms][DEBUG] END check_internet in 281 ms [2025-08-25 22:36:05][351162211391183][672 ms][DEBUG] rawBody.length=1150 [2025-08-25 22:36:05][351162211391183][672 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351162211391183\",\"model\":\"SM-S326DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7206\"}'\'' -e'"" [2025-08-25 22:36:05][351162211391183][672 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:36:05][351162211391183][672 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351162211391183\",\"model\":\"SM-S326DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7206\"}'\'' -e'"" [2025-08-25 22:36:10][351162211391183][5717 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bdcc79f0-2fb5-4020-8af3-6fd6f20d9a24","id":"QR_bdcc79f0-2fb5-4020-8af3-6fd6f20d9a24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:36:10][351162211391183][5873 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-25 22:36:10][351162211391183][5874 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-25 22:36:10][351162211391183][5874 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:43:04][358110361340297][1 ms][INFO] === Request start === [2025-08-25 22:43:04][358110361340297][1 ms][DEBUG] START check_scloud [2025-08-25 22:43:04][358110361340297][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:43:04][358110361340297][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 29406 4974 24119756 184924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:43:04][358110361340297][303 ms][DEBUG] targetPkg: running [2025-08-25 22:43:04][358110361340297][303 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 22:43:04][358110361340297][303 ms][DEBUG] START check_boot_completed [2025-08-25 22:43:04][358110361340297][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:43:04][358110361340297][347 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 22:43:04][358110361340297][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:43:04][358110361340297][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:43:04][358110361340297][394 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-25 22:43:04][358110361340297][394 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:43:04][358110361340297][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358110361340297\",\"model\":\"SM-A236M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1433\"}'\'' -e'"" [2025-08-25 22:43:04][358110361340297][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:43:04][358110361340297][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358110361340297\",\"model\":\"SM-A236M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1433\"}'\'' -e'"" [2025-08-25 22:43:09][358110361340297][5206 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0687f50-eee4-4b3a-b849-c2ba3554522f","id":"QR_e0687f50-eee4-4b3a-b849-c2ba3554522f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:43:09][358110361340297][5362 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-08-25 22:43:09][358110361340297][5362 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-08-25 22:43:09][358110361340297][5362 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:43:15][354793243433515][0 ms][INFO] === Request start === [2025-08-25 22:43:15][354793243433515][1 ms][DEBUG] START check_scloud [2025-08-25 22:43:15][354793243433515][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:43:16][354793243433515][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 29406 4974 24276760 195756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:43:16][354793243433515][299 ms][DEBUG] targetPkg: running [2025-08-25 22:43:16][354793243433515][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 22:43:16][354793243433515][299 ms][DEBUG] START check_boot_completed [2025-08-25 22:43:16][354793243433515][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:43:16][354793243433515][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 22:43:16][354793243433515][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:43:16][354793243433515][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:43:16][354793243433515][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 22:43:16][354793243433515][392 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:43:16][354793243433515][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354793243433515\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9050\"}'\'' -e'"" [2025-08-25 22:43:16][354793243433515][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:43:16][354793243433515][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354793243433515\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9050\"}'\'' -e'"" [2025-08-25 22:43:20][354793243433515][5047 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7cc8fbc4-dee4-49b1-a834-6abe7dc153f8","id":"QR_7cc8fbc4-dee4-49b1-a834-6abe7dc153f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:43:21][354793243433515][5203 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-08-25 22:43:21][354793243433515][5203 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-08-25 22:43:21][354793243433515][5204 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:45:04][352589406273298][0 ms][INFO] === Request start === [2025-08-25 22:45:04][352589406273298][1 ms][DEBUG] START check_scloud [2025-08-25 22:45:04][352589406273298][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:45:05][352589406273298][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 29406 4974 24369944 207692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:45:05][352589406273298][256 ms][DEBUG] targetPkg: running [2025-08-25 22:45:05][352589406273298][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-25 22:45:05][352589406273298][256 ms][DEBUG] START check_boot_completed [2025-08-25 22:45:05][352589406273298][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:45:05][352589406273298][303 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 22:45:05][352589406273298][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:45:05][352589406273298][365 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 22:45:05][352589406273298][365 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 22:45:05][352589406273298][365 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:45:05][352589406273298][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352589406273298\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1335\"}'\'' -e'"" [2025-08-25 22:45:05][352589406273298][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:45:05][352589406273298][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352589406273298\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1335\"}'\'' -e'"" [2025-08-25 22:45:10][352589406273298][5551 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b1a82b4-b2ef-406f-8c98-85dbb7551598","id":"QR_0b1a82b4-b2ef-406f-8c98-85dbb7551598","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:45:10][352589406273298][5707 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-08-25 22:45:10][352589406273298][5708 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-08-25 22:45:10][352589406273298][5708 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:45:16][350095131143493][1 ms][INFO] === Request start === [2025-08-25 22:45:16][350095131143493][1 ms][DEBUG] START check_scloud [2025-08-25 22:45:16][350095131143493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:45:16][350095131143493][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 29406 4974 24522784 218492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:45:16][350095131143493][254 ms][DEBUG] targetPkg: running [2025-08-25 22:45:16][350095131143493][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-25 22:45:16][350095131143493][254 ms][DEBUG] START check_boot_completed [2025-08-25 22:45:16][350095131143493][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:45:16][350095131143493][300 ms][DEBUG] ADB: done in 45 ms; out [2025-08-25 22:45:16][350095131143493][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:45:16][350095131143493][362 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 22:45:16][350095131143493][363 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 22:45:16][350095131143493][363 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:45:16][350095131143493][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350095131143493\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7732\"}'\'' -e'"" [2025-08-25 22:45:16][350095131143493][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:45:16][350095131143493][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350095131143493\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7732\"}'\'' -e'"" [2025-08-25 22:45:22][350095131143493][5455 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb8c5267-da7c-49ad-9816-8c641a22ba80","id":"QR_bb8c5267-da7c-49ad-9816-8c641a22ba80","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:45:22][350095131143493][5611 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-08-25 22:45:22][350095131143493][5611 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-08-25 22:45:22][350095131143493][5611 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:47:04][352208770935453][0 ms][INFO] === Request start === [2025-08-25 22:47:04][352208770935453][1 ms][DEBUG] START check_scloud [2025-08-25 22:47:04][352208770935453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:47:04][352208770935453][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 29406 4974 24627544 198248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:47:04][352208770935453][299 ms][DEBUG] targetPkg: running [2025-08-25 22:47:04][352208770935453][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-25 22:47:04][352208770935453][300 ms][DEBUG] START check_boot_completed [2025-08-25 22:47:04][352208770935453][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:47:04][352208770935453][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 22:47:04][352208770935453][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:47:04][352208770935453][395 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 22:47:04][352208770935453][395 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 22:47:04][352208770935453][395 ms][DEBUG] rawBody.length=1148 [2025-08-25 22:47:04][352208770935453][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208770935453\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1281\"}'\'' -e'"" [2025-08-25 22:47:04][352208770935453][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:47:04][352208770935453][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208770935453\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1281\"}'\'' -e'"" [2025-08-25 22:47:08][352208770935453][4595 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c4c0d89-f7aa-4295-a320-bf70e60714dd","id":"QR_5c4c0d89-f7aa-4295-a320-bf70e60714dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:47:08][352208770935453][4751 ms][DEBUG] proc_open done in 4356 ms; code=255; res.len=3343 [2025-08-25 22:47:08][352208770935453][4751 ms][DEBUG] END runCmdUntilRes#1 in 4356 ms [2025-08-25 22:47:08][352208770935453][4752 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:48:04][354793242273805][1 ms][INFO] === Request start === [2025-08-25 22:48:04][354793242273805][1 ms][DEBUG] START check_scloud [2025-08-25 22:48:04][354793242273805][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:48:05][354793242273805][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 29406 4974 24737212 160008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:48:05][354793242273805][307 ms][DEBUG] targetPkg: running [2025-08-25 22:48:05][354793242273805][307 ms][DEBUG] END check_scloud in 305 ms [2025-08-25 22:48:05][354793242273805][307 ms][DEBUG] START check_boot_completed [2025-08-25 22:48:05][354793242273805][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:48:05][354793242273805][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 22:48:05][354793242273805][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:48:05][354793242273805][416 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 22:48:05][354793242273805][417 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-25 22:48:05][354793242273805][417 ms][DEBUG] START check_internet [2025-08-25 22:48:05][354793242273805][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 22:48:05][354793242273805][916 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.081/203.081/203.081/0.000 ms\n [2025-08-25 22:48:05][354793242273805][916 ms][DEBUG] check_internet: online [2025-08-25 22:48:05][354793242273805][916 ms][DEBUG] END check_internet in 499 ms [2025-08-25 22:48:05][354793242273805][916 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:48:05][354793242273805][916 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354793242273805\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2836\"}'\'' -e'"" [2025-08-25 22:48:05][354793242273805][916 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:48:05][354793242273805][916 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354793242273805\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2836\"}'\'' -e'"" [2025-08-25 22:48:10][354793242273805][5087 ms][DEBUG] proc_open done in 4170 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 22:48:10][354793242273805][5087 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-25 22:48:10][354793242273805][5087 ms][WARN] Detected error: Process with pid 29406 either refused to load frida-agent, or terminated during injection [2025-08-25 22:48:10][354793242273805][5087 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 22:48:10][354793242273805][5227 ms][DEBUG] SU: done in 140 ms; out [2025-08-25 22:48:10][354793242273805][5227 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 22:48:10][354793242273805][5227 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 22:48:10][354793242273805][5352 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 22:48:10][354793242273805][5352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 22:48:10][354793242273805][5524 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 22:48:12][354793242273805][7539 ms][DEBUG] START check_boot_completed [2025-08-25 22:48:12][354793242273805][7539 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:48:12][354793242273805][7586 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 22:48:12][354793242273805][7586 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:48:12][354793242273805][7633 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:48:12][354793242273805][7633 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 22:48:15][354793242273805][10647 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 22:48:15][354793242273805][10648 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354793242273805\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2836\"}'\'' -e'"" [2025-08-25 22:48:20][354793242273805][15271 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34270cb2-c565-4c1e-a3c5-994e60ee93a8","id":"QR_34270cb2-c565-4c1e-a3c5-994e60ee93a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:48:20][354793242273805][15428 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-08-25 22:48:20][354793242273805][15428 ms][DEBUG] END runCmdUntilRes#2 in 4780 ms [2025-08-25 22:48:20][354793242273805][15428 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:50:05][353819350826794][1 ms][INFO] === Request start === [2025-08-25 22:50:05][353819350826794][1 ms][DEBUG] START check_scloud [2025-08-25 22:50:05][353819350826794][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:50:05][353819350826794][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 31957 4974 23474452 126952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:50:05][353819350826794][302 ms][DEBUG] targetPkg: running [2025-08-25 22:50:05][353819350826794][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-25 22:50:05][353819350826794][303 ms][DEBUG] START check_boot_completed [2025-08-25 22:50:05][353819350826794][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:50:05][353819350826794][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 22:50:05][353819350826794][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:50:05][353819350826794][397 ms][DEBUG] SU: done in 49 ms; out [2025-08-25 22:50:05][353819350826794][398 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-25 22:50:05][353819350826794][398 ms][DEBUG] START check_internet [2025-08-25 22:50:05][353819350826794][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 22:50:05][353819350826794][630 ms][DEBUG] SU: done in 232 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=134 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 134.760/134.760/134.760/0.000 ms\n [2025-08-25 22:50:05][353819350826794][630 ms][DEBUG] check_internet: online [2025-08-25 22:50:05][353819350826794][630 ms][DEBUG] END check_internet in 233 ms [2025-08-25 22:50:05][353819350826794][630 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:50:05][353819350826794][630 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353819350826794\",\"model\":\"SM-N986U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7047\"}'\'' -e'"" [2025-08-25 22:50:05][353819350826794][630 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:50:05][353819350826794][631 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353819350826794\",\"model\":\"SM-N986U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7047\"}'\'' -e'"" [2025-08-25 22:50:10][353819350826794][5473 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7978286a-ad32-40ab-be1c-e6208aa53727","id":"QR_7978286a-ad32-40ab-be1c-e6208aa53727","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:50:10][353819350826794][5629 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-25 22:50:10][353819350826794][5629 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-25 22:50:10][353819350826794][5629 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:52:04][350547665089286][1 ms][INFO] === Request start === [2025-08-25 22:52:04][350547665089286][1 ms][DEBUG] START check_scloud [2025-08-25 22:52:04][350547665089286][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:52:05][350547665089286][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 31957 4974 23580132 138288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:52:05][350547665089286][315 ms][DEBUG] targetPkg: running [2025-08-25 22:52:05][350547665089286][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 22:52:05][350547665089286][315 ms][DEBUG] START check_boot_completed [2025-08-25 22:52:05][350547665089286][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:52:05][350547665089286][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 22:52:05][350547665089286][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:52:05][350547665089286][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:52:05][350547665089286][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 22:52:05][350547665089286][408 ms][DEBUG] START check_internet [2025-08-25 22:52:05][350547665089286][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 22:52:05][350547665089286][878 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.383/201.383/201.383/0.000 ms\n [2025-08-25 22:52:05][350547665089286][878 ms][DEBUG] check_internet: online [2025-08-25 22:52:05][350547665089286][878 ms][DEBUG] END check_internet in 470 ms [2025-08-25 22:52:05][350547665089286][878 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:52:05][350547665089286][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547665089286\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8183\"}'\'' -e'"" [2025-08-25 22:52:05][350547665089286][878 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:52:05][350547665089286][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547665089286\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8183\"}'\'' -e'"" [2025-08-25 22:52:10][350547665089286][5875 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ebf01981-f77e-4035-88f2-f805f20d7fff","id":"QR_ebf01981-f77e-4035-88f2-f805f20d7fff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:52:10][350547665089286][6032 ms][DEBUG] proc_open done in 5153 ms; code=255; res.len=3343 [2025-08-25 22:52:10][350547665089286][6032 ms][DEBUG] END runCmdUntilRes#1 in 5153 ms [2025-08-25 22:52:10][350547665089286][6032 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 22:52:14][350013883765637][0 ms][INFO] === Request start === [2025-08-25 22:52:14][350013883765637][1 ms][DEBUG] START check_scloud [2025-08-25 22:52:14][350013883765637][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:52:15][350013883765637][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 31957 4974 23706284 150016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:52:15][350013883765637][290 ms][DEBUG] targetPkg: running [2025-08-25 22:52:15][350013883765637][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-25 22:52:15][350013883765637][290 ms][DEBUG] START check_boot_completed [2025-08-25 22:52:15][350013883765637][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:52:15][350013883765637][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 22:52:15][350013883765637][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:52:15][350013883765637][399 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 22:52:15][350013883765637][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 22:52:15][350013883765637][399 ms][DEBUG] START check_internet [2025-08-25 22:52:15][350013883765637][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 22:52:15][350013883765637][664 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.119/145.119/145.119/0.000 ms\n [2025-08-25 22:52:15][350013883765637][664 ms][DEBUG] check_internet: online [2025-08-25 22:52:15][350013883765637][665 ms][DEBUG] END check_internet in 266 ms [2025-08-25 22:52:15][350013883765637][665 ms][DEBUG] rawBody.length=1148 [2025-08-25 22:52:15][350013883765637][665 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883765637\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7130\"}'\'' -e'"" [2025-08-25 22:52:15][350013883765637][665 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:52:15][350013883765637][665 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883765637\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7130\"}'\'' -e'"" [2025-08-25 22:52:19][350013883765637][4132 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 22:52:19][350013883765637][4288 ms][DEBUG] proc_open done in 3623 ms; code=255; res.len=107 [2025-08-25 22:52:19][350013883765637][4288 ms][DEBUG] END runCmdUntilRes#1 in 3623 ms [2025-08-25 22:52:19][350013883765637][4288 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 22:52:19][][0 ms][INFO] === Request start === [2025-08-25 22:52:19][][1 ms][DEBUG] START check_scloud [2025-08-25 22:52:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:52:19][][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 31957 4974 23828340 160944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:52:19][][314 ms][DEBUG] targetPkg: running [2025-08-25 22:52:19][][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 22:52:19][][314 ms][DEBUG] START check_boot_completed [2025-08-25 22:52:19][][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:52:19][][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 22:52:19][][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:52:19][][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:52:19][][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 22:52:19][][392 ms][DEBUG] START check_internet [2025-08-25 22:52:19][][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 22:52:20][][611 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.096/115.096/115.096/0.000 ms\n [2025-08-25 22:52:20][][611 ms][DEBUG] check_internet: online [2025-08-25 22:52:20][][611 ms][DEBUG] END check_internet in 219 ms [2025-08-25 22:52:20][][611 ms][DEBUG] rawBody.length=1129 [2025-08-25 22:52:20][][611 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TB1S1L0B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8517\"}'\'' -e'"" [2025-08-25 22:52:20][][611 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:52:20][][611 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TB1S1L0B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8517\"}'\'' -e'"" [2025-08-25 22:52:23][][3813 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-25 22:52:23][][3969 ms][DEBUG] proc_open done in 3358 ms; code=255; res.len=107 [2025-08-25 22:52:23][][3969 ms][DEBUG] END runCmdUntilRes#1 in 3358 ms [2025-08-25 22:52:23][][3969 ms][INFO] SUCCESS response from frida (len=107) [2025-08-25 22:53:04][350455583008075][0 ms][INFO] === Request start === [2025-08-25 22:53:04][350455583008075][1 ms][DEBUG] START check_scloud [2025-08-25 22:53:04][350455583008075][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 22:53:04][350455583008075][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 31957 4974 23957548 171880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 22:53:04][350455583008075][254 ms][DEBUG] targetPkg: running [2025-08-25 22:53:04][350455583008075][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-25 22:53:04][350455583008075][254 ms][DEBUG] START check_boot_completed [2025-08-25 22:53:04][350455583008075][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 22:53:04][350455583008075][285 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 22:53:04][350455583008075][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 22:53:04][350455583008075][332 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 22:53:04][350455583008075][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 22:53:04][350455583008075][332 ms][DEBUG] rawBody.length=1149 [2025-08-25 22:53:04][350455583008075][332 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455583008075\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4312\"}'\'' -e'"" [2025-08-25 22:53:04][350455583008075][332 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 22:53:04][350455583008075][332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455583008075\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4312\"}'\'' -e'"" [2025-08-25 22:53:09][350455583008075][5144 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b33eb6b4-2d9a-40f7-871b-6474268e7270","id":"QR_b33eb6b4-2d9a-40f7-871b-6474268e7270","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 22:53:09][350455583008075][5300 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-08-25 22:53:09][350455583008075][5300 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-08-25 22:53:09][350455583008075][5300 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 23:00:05][351663700070840][1 ms][INFO] === Request start === [2025-08-25 23:00:05][351663700070840][1 ms][DEBUG] START check_scloud [2025-08-25 23:00:05][351663700070840][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 23:00:06][351663700070840][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 31957 4974 24057924 184264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 23:00:06][351663700070840][309 ms][DEBUG] targetPkg: running [2025-08-25 23:00:06][351663700070840][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-25 23:00:06][351663700070840][309 ms][DEBUG] START check_boot_completed [2025-08-25 23:00:06][351663700070840][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 23:00:06][351663700070840][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 23:00:06][351663700070840][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 23:00:06][351663700070840][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 23:00:06][351663700070840][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 23:00:06][351663700070840][387 ms][DEBUG] START check_internet [2025-08-25 23:00:06][351663700070840][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 23:00:06][351663700070840][903 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.232/200.232/200.232/0.000 ms\n [2025-08-25 23:00:06][351663700070840][903 ms][DEBUG] check_internet: online [2025-08-25 23:00:06][351663700070840][903 ms][DEBUG] END check_internet in 516 ms [2025-08-25 23:00:06][351663700070840][903 ms][DEBUG] rawBody.length=1149 [2025-08-25 23:00:06][351663700070840][903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663700070840\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3681\"}'\'' -e'"" [2025-08-25 23:00:06][351663700070840][903 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 23:00:06][351663700070840][903 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663700070840\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3681\"}'\'' -e'"" [2025-08-25 23:00:11][351663700070840][5792 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae25b0fe-53f5-4436-9d50-040fa00d9b2b","id":"QR_ae25b0fe-53f5-4436-9d50-040fa00d9b2b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 23:00:11][351663700070840][5948 ms][DEBUG] proc_open done in 5046 ms; code=255; res.len=3343 [2025-08-25 23:00:11][351663700070840][5948 ms][DEBUG] END runCmdUntilRes#1 in 5046 ms [2025-08-25 23:00:11][351663700070840][5948 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 23:02:05][354333240096880][0 ms][INFO] === Request start === [2025-08-25 23:02:05][354333240096880][1 ms][DEBUG] START check_scloud [2025-08-25 23:02:05][354333240096880][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 23:02:05][354333240096880][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 31957 4974 24199412 195200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 23:02:05][354333240096880][264 ms][DEBUG] targetPkg: running [2025-08-25 23:02:05][354333240096880][264 ms][DEBUG] END check_scloud in 264 ms [2025-08-25 23:02:05][354333240096880][264 ms][DEBUG] START check_boot_completed [2025-08-25 23:02:05][354333240096880][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 23:02:05][354333240096880][310 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 23:02:05][354333240096880][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 23:02:05][354333240096880][373 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 23:02:05][354333240096880][373 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-25 23:02:05][354333240096880][373 ms][DEBUG] START check_internet [2025-08-25 23:02:05][354333240096880][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 23:02:05][354333240096880][795 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.903/201.903/201.903/0.000 ms\n [2025-08-25 23:02:05][354333240096880][795 ms][DEBUG] check_internet: online [2025-08-25 23:02:05][354333240096880][795 ms][DEBUG] END check_internet in 422 ms [2025-08-25 23:02:05][354333240096880][795 ms][DEBUG] rawBody.length=1149 [2025-08-25 23:02:05][354333240096880][795 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354333240096880\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7740\"}'\'' -e'"" [2025-08-25 23:02:05][354333240096880][795 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 23:02:05][354333240096880][795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354333240096880\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7740\"}'\'' -e'"" [2025-08-25 23:02:10][354333240096880][5793 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80b19a6b-f32d-443d-803b-d8c2f54d4ec9","id":"QR_80b19a6b-f32d-443d-803b-d8c2f54d4ec9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 23:02:10][354333240096880][5950 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-08-25 23:02:10][354333240096880][5950 ms][DEBUG] END runCmdUntilRes#1 in 5154 ms [2025-08-25 23:02:10][354333240096880][5950 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 23:05:05][352674170440800][1 ms][INFO] === Request start === [2025-08-25 23:05:05][352674170440800][1 ms][DEBUG] START check_scloud [2025-08-25 23:05:05][352674170440800][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 23:05:05][352674170440800][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 31957 4974 24358232 207256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 23:05:05][352674170440800][315 ms][DEBUG] targetPkg: running [2025-08-25 23:05:05][352674170440800][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-25 23:05:05][352674170440800][315 ms][DEBUG] START check_boot_completed [2025-08-25 23:05:05][352674170440800][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 23:05:05][352674170440800][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 23:05:05][352674170440800][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 23:05:05][352674170440800][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 23:05:05][352674170440800][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-25 23:05:05][352674170440800][408 ms][DEBUG] rawBody.length=1149 [2025-08-25 23:05:05][352674170440800][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674170440800\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6994\"}'\'' -e'"" [2025-08-25 23:05:05][352674170440800][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 23:05:05][352674170440800][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674170440800\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6994\"}'\'' -e'"" [2025-08-25 23:05:10][352674170440800][5376 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7529a356-8578-4d94-8d23-fdbbc7b485a7","id":"QR_7529a356-8578-4d94-8d23-fdbbc7b485a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 23:05:10][352674170440800][5532 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-08-25 23:05:10][352674170440800][5532 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-08-25 23:05:10][352674170440800][5532 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 23:12:04][351331724085059][1 ms][INFO] === Request start === [2025-08-25 23:12:04][351331724085059][1 ms][DEBUG] START check_scloud [2025-08-25 23:12:04][351331724085059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 23:12:04][351331724085059][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 31957 4974 24495536 218300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 23:12:04][351331724085059][299 ms][DEBUG] targetPkg: running [2025-08-25 23:12:04][351331724085059][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-25 23:12:04][351331724085059][299 ms][DEBUG] START check_boot_completed [2025-08-25 23:12:04][351331724085059][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 23:12:04][351331724085059][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 23:12:04][351331724085059][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 23:12:04][351331724085059][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 23:12:04][351331724085059][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 23:12:04][351331724085059][377 ms][DEBUG] START check_internet [2025-08-25 23:12:04][351331724085059][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 23:12:05][351331724085059][768 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.508/201.508/201.508/0.000 ms\n [2025-08-25 23:12:05][351331724085059][768 ms][DEBUG] check_internet: online [2025-08-25 23:12:05][351331724085059][768 ms][DEBUG] END check_internet in 391 ms [2025-08-25 23:12:05][351331724085059][768 ms][DEBUG] rawBody.length=1149 [2025-08-25 23:12:05][351331724085059][768 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351331724085059\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5055\"}'\'' -e'"" [2025-08-25 23:12:05][351331724085059][768 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 23:12:05][351331724085059][768 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351331724085059\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5055\"}'\'' -e'"" [2025-08-25 23:12:10][351331724085059][5876 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8f08aed-d475-4630-8841-3385caee3dbe","id":"QR_f8f08aed-d475-4630-8841-3385caee3dbe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 23:12:10][351331724085059][6032 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-08-25 23:12:10][351331724085059][6032 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-08-25 23:12:10][351331724085059][6032 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 23:25:04][351663703059477][1 ms][INFO] === Request start === [2025-08-25 23:25:04][351663703059477][1 ms][DEBUG] START check_scloud [2025-08-25 23:25:04][351663703059477][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 23:25:05][351663703059477][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 31957 4974 24611476 229696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 23:25:05][351663703059477][291 ms][DEBUG] targetPkg: running [2025-08-25 23:25:05][351663703059477][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-25 23:25:05][351663703059477][291 ms][DEBUG] START check_boot_completed [2025-08-25 23:25:05][351663703059477][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 23:25:05][351663703059477][338 ms][DEBUG] ADB: done in 46 ms; out [2025-08-25 23:25:05][351663703059477][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 23:25:05][351663703059477][400 ms][DEBUG] SU: done in 63 ms; out [2025-08-25 23:25:05][351663703059477][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 23:25:05][351663703059477][401 ms][DEBUG] rawBody.length=1149 [2025-08-25 23:25:05][351663703059477][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663703059477\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2097\"}'\'' -e'"" [2025-08-25 23:25:05][351663703059477][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 23:25:05][351663703059477][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663703059477\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2097\"}'\'' -e'"" [2025-08-25 23:25:10][351663703059477][5212 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3611e37f-5ac7-4e60-ad35-e1850281340b","id":"QR_3611e37f-5ac7-4e60-ad35-e1850281340b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 23:25:10][351663703059477][5368 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-08-25 23:25:10][351663703059477][5368 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-08-25 23:25:10][351663703059477][5368 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 23:28:03][355322294297451][1 ms][INFO] === Request start === [2025-08-25 23:28:03][355322294297451][1 ms][DEBUG] START check_scloud [2025-08-25 23:28:03][355322294297451][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 23:28:03][355322294297451][255 ms][DEBUG] SU: done in 253 ms; outu0_a118 31957 4974 24773444 242120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 23:28:03][355322294297451][255 ms][DEBUG] targetPkg: running [2025-08-25 23:28:03][355322294297451][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-25 23:28:03][355322294297451][255 ms][DEBUG] START check_boot_completed [2025-08-25 23:28:03][355322294297451][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 23:28:03][355322294297451][302 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 23:28:03][355322294297451][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 23:28:03][355322294297451][364 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 23:28:03][355322294297451][364 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 23:28:03][355322294297451][364 ms][DEBUG] START check_internet [2025-08-25 23:28:03][355322294297451][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 23:28:04][355322294297451][786 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.146/201.146/201.146/0.000 ms\n [2025-08-25 23:28:04][355322294297451][786 ms][DEBUG] check_internet: online [2025-08-25 23:28:04][355322294297451][786 ms][DEBUG] END check_internet in 422 ms [2025-08-25 23:28:04][355322294297451][786 ms][DEBUG] rawBody.length=1148 [2025-08-25 23:28:04][355322294297451][786 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322294297451\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4067\"}'\'' -e'"" [2025-08-25 23:28:04][355322294297451][786 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 23:28:04][355322294297451][786 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322294297451\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4067\"}'\'' -e'"" [2025-08-25 23:28:07][355322294297451][4504 ms][DEBUG] proc_open done in 3717 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-25 23:28:07][355322294297451][4504 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-25 23:28:07][355322294297451][4504 ms][WARN] Detected error: Process with pid 31957 either refused to load frida-agent, or terminated during injection [2025-08-25 23:28:07][355322294297451][4504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-25 23:28:07][355322294297451][4660 ms][DEBUG] SU: done in 156 ms; out [2025-08-25 23:28:07][355322294297451][4660 ms][WARN] targetPkg: not running, restarting 2 [2025-08-25 23:28:07][355322294297451][4660 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-25 23:28:08][355322294297451][4785 ms][DEBUG] SU: done in 125 ms; out [2025-08-25 23:28:08][355322294297451][4785 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-25 23:28:08][355322294297451][4957 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-25 23:28:10][355322294297451][6972 ms][DEBUG] START check_boot_completed [2025-08-25 23:28:10][355322294297451][6972 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 23:28:10][355322294297451][7019 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 23:28:10][355322294297451][7019 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 23:28:10][355322294297451][7066 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 23:28:10][355322294297451][7066 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 23:28:13][355322294297451][10080 ms][DEBUG] START runCmdUntilRes#2 [2025-08-25 23:28:13][355322294297451][10080 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322294297451\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4067\"}'\'' -e'"" [2025-08-25 23:28:17][355322294297451][13783 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4014bac5-6ddc-483b-bd48-aef699ae3fab","id":"QR_4014bac5-6ddc-483b-bd48-aef699ae3fab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 23:28:17][355322294297451][13939 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-25 23:28:17][355322294297451][13939 ms][DEBUG] END runCmdUntilRes#2 in 3859 ms [2025-08-25 23:28:17][355322294297451][13939 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 23:28:21][353283326465395][0 ms][INFO] === Request start === [2025-08-25 23:28:21][353283326465395][1 ms][DEBUG] START check_scloud [2025-08-25 23:28:21][353283326465395][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 23:28:21][353283326465395][248 ms][DEBUG] SU: done in 248 ms; outu0_a118 1506 4974 23568440 124324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 23:28:21][353283326465395][249 ms][DEBUG] targetPkg: running [2025-08-25 23:28:21][353283326465395][249 ms][DEBUG] END check_scloud in 248 ms [2025-08-25 23:28:21][353283326465395][249 ms][DEBUG] START check_boot_completed [2025-08-25 23:28:21][353283326465395][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 23:28:21][353283326465395][295 ms][DEBUG] ADB: done in 47 ms; out [2025-08-25 23:28:21][353283326465395][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 23:28:21][353283326465395][358 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 23:28:21][353283326465395][358 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-25 23:28:21][353283326465395][358 ms][DEBUG] START check_internet [2025-08-25 23:28:21][353283326465395][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-25 23:28:21][353283326465395][701 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=233 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 233.019/233.019/233.019/0.000 ms\n [2025-08-25 23:28:21][353283326465395][702 ms][DEBUG] check_internet: online [2025-08-25 23:28:21][353283326465395][702 ms][DEBUG] END check_internet in 344 ms [2025-08-25 23:28:21][353283326465395][702 ms][DEBUG] rawBody.length=1149 [2025-08-25 23:28:21][353283326465395][702 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283326465395\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6123\"}'\'' -e'"" [2025-08-25 23:28:21][353283326465395][702 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 23:28:21][353283326465395][702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283326465395\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6123\"}'\'' -e'"" [2025-08-25 23:28:27][353283326465395][5841 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68717323-2eba-488b-9a7d-22dad1e831e3","id":"QR_68717323-2eba-488b-9a7d-22dad1e831e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 23:28:27][353283326465395][5997 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-08-25 23:28:27][353283326465395][5997 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-08-25 23:28:27][353283326465395][5997 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 23:35:04][352923542154072][1 ms][INFO] === Request start === [2025-08-25 23:35:04][352923542154072][1 ms][DEBUG] START check_scloud [2025-08-25 23:35:04][352923542154072][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 23:35:05][352923542154072][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 1506 4974 23683536 138432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 23:35:05][352923542154072][303 ms][DEBUG] targetPkg: running [2025-08-25 23:35:05][352923542154072][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-25 23:35:05][352923542154072][303 ms][DEBUG] START check_boot_completed [2025-08-25 23:35:05][352923542154072][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 23:35:05][352923542154072][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 23:35:05][352923542154072][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 23:35:05][352923542154072][382 ms][DEBUG] SU: done in 48 ms; out [2025-08-25 23:35:05][352923542154072][382 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-25 23:35:05][352923542154072][382 ms][DEBUG] rawBody.length=1149 [2025-08-25 23:35:05][352923542154072][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923542154072\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3186\"}'\'' -e'"" [2025-08-25 23:35:05][352923542154072][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 23:35:05][352923542154072][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923542154072\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3186\"}'\'' -e'"" [2025-08-25 23:35:10][352923542154072][5645 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6103dcdd-0a0c-4ba1-85e4-7568c63254fc","id":"QR_6103dcdd-0a0c-4ba1-85e4-7568c63254fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 23:35:10][352923542154072][5801 ms][DEBUG] proc_open done in 5419 ms; code=255; res.len=3343 [2025-08-25 23:35:10][352923542154072][5801 ms][DEBUG] END runCmdUntilRes#1 in 5419 ms [2025-08-25 23:35:10][352923542154072][5801 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 23:41:04][354600344072151][1 ms][INFO] === Request start === [2025-08-25 23:41:04][354600344072151][1 ms][DEBUG] START check_scloud [2025-08-25 23:41:04][354600344072151][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 23:41:05][354600344072151][255 ms][DEBUG] SU: done in 253 ms; outu0_a118 1506 4974 23837248 149728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 23:41:05][354600344072151][255 ms][DEBUG] targetPkg: running [2025-08-25 23:41:05][354600344072151][255 ms][DEBUG] END check_scloud in 253 ms [2025-08-25 23:41:05][354600344072151][255 ms][DEBUG] START check_boot_completed [2025-08-25 23:41:05][354600344072151][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 23:41:05][354600344072151][286 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 23:41:05][354600344072151][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 23:41:05][354600344072151][333 ms][DEBUG] SU: done in 47 ms; out [2025-08-25 23:41:05][354600344072151][333 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-25 23:41:05][354600344072151][333 ms][DEBUG] rawBody.length=1149 [2025-08-25 23:41:05][354600344072151][333 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354600344072151\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4752\"}'\'' -e'"" [2025-08-25 23:41:05][354600344072151][333 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 23:41:05][354600344072151][333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354600344072151\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4752\"}'\'' -e'"" [2025-08-25 23:41:10][354600344072151][5425 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce5a8e69-be21-46dc-ba69-51630b6b47a7","id":"QR_ce5a8e69-be21-46dc-ba69-51630b6b47a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 23:41:10][354600344072151][5581 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-08-25 23:41:10][354600344072151][5581 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-08-25 23:41:10][354600344072151][5581 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-25 23:55:05][357467542601042][1 ms][INFO] === Request start === [2025-08-25 23:55:05][357467542601042][1 ms][DEBUG] START check_scloud [2025-08-25 23:55:05][357467542601042][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-25 23:55:05][357467542601042][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 1506 4974 23934800 140440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-25 23:55:05][357467542601042][301 ms][DEBUG] targetPkg: running [2025-08-25 23:55:05][357467542601042][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-25 23:55:05][357467542601042][301 ms][DEBUG] START check_boot_completed [2025-08-25 23:55:05][357467542601042][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-25 23:55:05][357467542601042][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-25 23:55:05][357467542601042][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-25 23:55:05][357467542601042][395 ms][DEBUG] SU: done in 62 ms; out [2025-08-25 23:55:05][357467542601042][395 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-25 23:55:05][357467542601042][395 ms][DEBUG] rawBody.length=1149 [2025-08-25 23:55:05][357467542601042][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357467542601042\",\"model\":\"SM-A325M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8831\"}'\'' -e'"" [2025-08-25 23:55:05][357467542601042][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-25 23:55:05][357467542601042][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357467542601042\",\"model\":\"SM-A325M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8831\"}'\'' -e'"" [2025-08-25 23:55:10][357467542601042][5456 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9f0eb28-d086-4964-9f0b-ad167e2fe115","id":"QR_c9f0eb28-d086-4964-9f0b-ad167e2fe115","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-25 23:55:10][357467542601042][5612 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-08-25 23:55:10][357467542601042][5613 ms][DEBUG] END runCmdUntilRes#1 in 5218 ms [2025-08-25 23:55:10][357467542601042][5613 ms][INFO] SUCCESS response from frida (len=3343)